🟡 Medium ⏱ 10–30 min Last verified: 9 September 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2023-7022 Related CVEs: CVE-2023-1672 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 9 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libpng stack-based buffer overflow and other code concerns Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 Upstream summary: Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people […]
🟢 Low ⏱ 5–15 min Last verified: 9 September 2021 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-flask-caching — remote code execution or local privilege escalation vulnerabilities Related CVEs: CVE-2021-33026 Upstream summary: subnix reports: The Flask-Caching extension through 2.0.2 for Flask relies on Pickle for serialization, which […]
🟠 High ⏱ 15–60 min Last verified: 9 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-1023 CVE-2004-0226 CVE-2004-0231 CVE-2004-0232 CVE-2004-1004 CVE-2004-1005 CVE-2004-1009 CVE-2004-1090 +10 more Upstream summary: Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-IU-2022:632-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3670 Upstream summary: MaxQueryDuration not honoured in Samba AD DC LDAP Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]
🟡 Medium ⏱ 10–30 min Last verified: 9 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0624 CVE-2005-0625 CVE-2008-2230 CVE-2014-0479 Upstream summary: reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 9 September 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-7819 CVE-2018-3760 Upstream summary: Multiple directory traversal vulnerabilities in server.rb in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2.3.3, 2.4.x before 2.4.6, 2.5.x before […]
🟡 Medium ⏱ 10–30 min Last verified: 9 September 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8118-1 Related CVEs: CVE-2020-25796 CVE-2020-25792 CVE-2020-25794 CVE-2020-25793 CVE-2020-25791 Upstream summary: Yechan Bae discovered that sized-chunks did not properly validate array size when constructing Chunk. An attacker could possibly use these […]
🟡 Medium ⏱ 10–30 min Last verified: 9 September 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2022-1801 Related CVEs: CVE-2021-39358 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 2.12.6-r0 📖 ~4 min read • Source: Alpine secdb entry — apk-tools 2.12.6-r0 Related CVEs: CVE-2021-36159 CVE-2021-30139 Upstream summary: Alpine main repository for vedge ships apk-tools 2.12.6-r0 which addresses CVE-2021-36159. Table of contents Symptom & Impact […]
