🟡 Medium ⏱ 10–30 min Last verified: 17 July 2021 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:0814-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-0561 CVE-2020-0499 CVE-2014-8962 CVE-2014-9028 Upstream summary: In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-2018 Related CVEs: CVE-2020-27828 CVE-2021-26926 CVE-2021-26927 CVE-2021-3272 CVE-2021-3443 CVE-2021-3467 CVE-2016-9396 CVE-2017-1000050 Upstream summary: A flaw was found in the Jasper tool's jpc encoder. This flaw allows an attacker to craft […]
🟠 High ⏱ 15–60 min Last verified: 17 July 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-9141 Related CVEs: CVE-2021-27363 CVE-2020-25639 CVE-2020-28588 CVE-2020-27171 CVE-2021-27364 CVE-2021-3444 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
Even with SSH key-based authentication enabled, your server’s SSH port is still probed constantly by automated scanners. Fail2Ban monitors log files for repeated authentication failures and bans offending IP addresses by inserting temporary rules into the firewall. On RHEL 8, Fail2Ban integrates natively with firewalld, making it the right tool to complement the hardening steps […]
🟡 Medium ⏱ 10–30 min Last verified: 16 July 2021 Affected versions: Oracle Linux 8 📖 ~4 min read • Source: ELSA advisory ELSA-2021-4292 Related CVEs: CVE-2021-33620 CVE-2021-28662 CVE-2021-31807 CVE-2021-28651 CVE-2021-31808 CVE-2021-28652 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2021:1586 Related CVEs: CVE-2019-13012 CVE-2020-13543 CVE-2020-13584 CVE-2020-16125 CVE-2020-9948 CVE-2020-9951 CVE-2020-9983 CVE-2021-1817 +4 more Upstream summary: GNOME is the default desktop environment of AlmaLinux. The following packages have been upgraded to a later […]
🟠 High ⏱ 5–30 min Last verified: 16 July 2021 Affected versions: Debian 9 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
Introduction This guide explains how to Detect Rootkits with rkhunter on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for fine-grained […]
🟡 Medium ⏱ 10–30 min Last verified: 16 July 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libssh2 — multiple issues Related CVEs: CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 +1 more Upstream summary: libssh2 developers report: Defend against possible integer overflows in comp_method_zlib_decomp. Defend against […]
🟡 Medium ⏱ 5–30 min Last verified: 16 July 2021 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
