🟢 Low ⏱ 5–15 min Last verified: 30 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libproxy — stack-based buffer overflow Related CVEs: CVE-2012-4504 Upstream summary: Tomas Hoger reports: A buffer overflow flaw was discovered in the libproxy's url::get_pac() used to download proxy.pac proxy auto-configuration file. […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-1132 Upstream summary: The mlfi_envrcpt function in spamass-milter.cpp in SpamAssassin Milter Plugin 0.3.1, when using the expand option, allows remote attackers to execute arbitrary system commands via shell […]
Introduction This tutorial covers How to Deploy a Symfony Application on SLES 12 on SLES 12. SLES 12 (SUSE Linux Enterprise Server 16) is SUSE’s enterprise-grade Linux distribution. It uses the zypper package manager, AppArmor for mandatory access control, and systemctl for service management. Prerequisites Ensure your SLES 12 system is up to date: zypper […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: popfile file disclosure Upstream summary: John Graham-Cumming reports that certain configurations of POPFile may allow the retrieval of any files with the extensions .gif, .png, .ico, .css, as well as […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xchat remotely exploitable buffer overflow (Socks5) Related CVEs: CVE-2004-0409 Upstream summary: A straightforward stack buffer overflow exists in XChat's Socks5 proxy support. The XChat developers report that `tsifra' discovered this […]
🟠 High ⏱ 15–60 min Last verified: 30 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-11311 CVE-2018-10017 CVE-2018-11710 CVE-2018-20860 CVE-2018-20861 CVE-2018-6611 CVE-2019-14380 CVE-2019-14381 +3 more Upstream summary: soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-16491 CVE-2018-16492 Upstream summary: A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype. Table of contents Symptom […]
Introduction FreeBSD 12 is a UNIX-derived operating system renowned for its network stack performance, ZFS integration, and Jail isolation primitives. Setting up set up nfs server on freebsd 12 on FreeBSD 12 follows the rc.conf/service(8) paradigm rather than systemd, which means enabling a service and configuring its startup options are done differently from any Linux […]
🟢 Low ⏱ 5–15 min Last verified: 30 September 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5742-1 Related CVEs: CVE-2017-9937 Upstream summary: It was discovered that JBIG-KIT incorrectly handled decoding certain large image files. If a user or automated system using JBIG-KIT were tricked into opening […]
🟡 Medium ⏱ 10–30 min Last verified: 30 September 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-1823 Related CVEs: CVE-2021-32786 CVE-2021-32792 CVE-2021-39191 CVE-2021-32791 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches […]
