Systemd Services

Ubuntu 14.04 — qpdf — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — qpdf — multiple vulnerabilities (14 CVEs) — patch and remediation guide

  • February 12, 2017
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 12 February 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3638-1 Related CVEs: CVE-2015-9252 CVE-2017-11624 CVE-2017-11625 CVE-2017-11626 CVE-2017-11627 CVE-2017-12595 CVE-2017-18183 CVE-2017-18184  +6 more Upstream summary: It was discovered that QPDF incorrectly handled certain malformed files. A remote attacker could use […]

Read more
Ubuntu 16.04 — doxygen — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — doxygen — vulnerability — patch and remediation guide

  • February 11, 2017
  • Linux
  • Comment off

🟢 Low   ⏱ 5–15 min  Last verified: 11 February 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4002-1 Related CVEs: CVE-2016-10245 Upstream summary: It was discovered that Doxygen incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code and compromise sensitive information. […]

Read more
IBM AIX 7.2 — CVE-1999-0092 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-1999-0092 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 9 February 2017 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-1999-0092, IBM PSIRT advisory page CVE: CVE-1999-0092 NVD summary: Various vulnerabilities in the AIX portmir command allows local users to obtain root access. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE   exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of contents Symptom & […]

Read more
SLES 12 — libgc1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libgc1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • February 8, 2017
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 8 February 2017 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2012-2673 CVE-2016-9427 Upstream summary: Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in […]

Read more
IBM AIX 7.2 — CVE-1999-0337 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-1999-0337 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 7 February 2017 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-1999-0337, IBM PSIRT advisory page CVE: CVE-1999-0337 NVD summary: AIX batch queue (bsh) allows local and remote users to gain additional privileges when network printing is enabled. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE   exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table […]

Read more
SLES 12 — libidn11 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — libidn11 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

  • February 7, 2017
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 7 February 2017 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2019:695-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-14062 CVE-2015-8948 CVE-2016-6261 CVE-2016-6262 CVE-2016-6263 Upstream summary: Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a […]

Read more
IBM AIX 7.2 — CVE-1999-0903 — vulnerability — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-1999-0903 — vulnerability — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 6 February 2017 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-1999-0903, IBM PSIRT advisory page CVE: CVE-1999-0903 NVD summary: genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE   exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table […]

Read more
IBM AIX 7.2 — CVE-1999-0693 — buffer overflow — patch and remediation guide — diagnosis and fix on IBM AIX 7.2

IBM AIX 7.2 — CVE-1999-0693 — buffer overflow — patch and remediation guide

🟠 High   ⏱ 30–90 min  Last verified: 6 February 2017 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-1999-0693, IBM PSIRT advisory page CVE: CVE-1999-0693 NVD summary: Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges. References: sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=col   www.securityfocus.com/bid/641   www1.itrc.hp.com/service/cki/docDisplay.do?docId […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT