Security Hardening

Common Problems 119136

Ubuntu 14.04 LTS – rsyslog causes excessive disk I/O and latency – Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 31 October 2019 Affected versions: Ubuntu 14.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
FreeBSD 12 — rubygem19-rack — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — rubygem19-rack — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ruby Rack Gem — Multiple Issues Related CVEs: CVE-2013-0262 CVE-2013-0263 Upstream summary: Rack developers report: Today we are proud to announce the release of Rack 1.4.5. Fix CVE-2013-0263, timing attack […]

Read more
Common Problems 112952

Windows Server 2016 — PXE clients fail to obtain boot options from DHCP policy classes on Server 2019 — Fix & Prevention

🟡 Medium   ⏱ 5–30 min  Last verified: 31 October 2019 Affected versions: Windows Server 2016 📖 ~2 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution — Primary Fix Solution — Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
FreeBSD 12 — php55-snmp — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — php55-snmp — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 31 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2015-8879 CVE-2016-5385 CVE-2016-5399 CVE-2016-6288 CVE-2016-6289 CVE-2016-6290 CVE-2016-6291 CVE-2016-6292  +4 more Upstream summary: PHP reports: Fixed bug #69975 (PHP segfaults when accessing nvarchar(max) defined columns) […]

Read more
FreeBSD 12 — apache+mod_ssl+mod_snmp+mod_deflate+ipv — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — apache+mod_ssl+mod_snmp+mod_deflate+ipv — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 31 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]

Read more
How to Set Up Health Attestation Service on Windows Server 2019 — step-by-step Windows Server 2019 tutorial on Progressive Robot

How to Set Up Health Attestation Service on Windows Server 2019

Introduction to Health Attestation Service on Windows Server 2019 Windows Device Health Attestation (DHA) is a security feature that allows organizations to verify the boot-time integrity of Windows devices using measurements stored in the Trusted Platform Module (TPM). The Health Attestation Service on Windows Server 2019 is the on-premises server component that collects, validates, and […]

Read more
FreeBSD 12 — libsixel — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — libsixel — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 October 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Memory leak in different components Related CVEs: CVE-2018-14072 CVE-2018-14073 Upstream summary: MITRE reports: bsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, sixel_decode_raw in fromsixel.c and […]

Read more
Debian 9 — vim — vulnerability — patch and remediation guide — diagnosis and fix on Debian 9

Debian 9 — vim — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 October 2019 Affected versions: Debian 9 (stretch) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-12735 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
openSUSE Tumbleweed — apache-commons-httpclient — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — apache-commons-httpclient — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2020:1873-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-5262 CVE-2012-5783 CVE-2014-3577 Upstream summary: http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers […]

Read more
Ubuntu 16.04 — liblivemedia — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — liblivemedia — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 31 October 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4853-1 Related CVEs: CVE-2018-4013 CVE-2019-6256 CVE-2019-7314 CVE-2019-9215 Upstream summary: It was discovered that liveMedia incorrectly handled certain network packets. An attacker could possibly use this issue to execute arbitrary code. […]

Read more
CHAT