Questions tagged [vulnerability]
The vulnerability tag has no usage guidance.
14
questions with no upvoted or accepted answers
2
votes
0
answers
3k
views
How to upgrade ssh version from 8.2 to 8.6 in ubuntu machine
I have tried to install ssh version 8.6 with ref link https://blog.jonkimi.com/2020/04/17/Upgrade-openssh-server-on-Ubuntu/. After installation when I run command "ssh -V" it shows latest ...
- 21
1
vote
0
answers
145
views
Confused about reported kernel CVE by openscap with OVAL on ubuntu 20.04/22.04 - false positive?
I use extensively openscap with OVAL definitions provided by Canonical for a year now (https://security-metadata.canonical.com/oval/) .
It works well, but I am confused about some results regarding a ...
- 11
1
vote
0
answers
490
views
What can cause RDS (Reliable Datagram Sockets) to be enabled?
In May 2019, CVE-2019-11815 was reported, which is a vulnerability in the RDS (Reliable Datagram Sockets) kernel module.
Yesterday (23rd July 2019), a kernel patch for the vulnerability was released ...
- 250
1
vote
0
answers
736
views
check if an installed package is vulnerable to a given CVE number
Is there an "automatic/machine" way (meaning without manually checking in https://people.canonical.com/~ubuntu-security/cve/) to check if an installed package (or given the installed package version) ...
- 11
1
vote
0
answers
103
views
Have I opened myself to a hack from posting terminal output here?
So, yesterday I posed a question where I supplied two dmesg | tail outputs, plus uname -a and ls -a /boot. It disclosed my system time and my username, (plus my VPN provider and other software).
I ...
1
vote
1
answer
466
views
Server tries to connect to other servers
I have an Ubuntu 14.04 server and I have discovered in the /var/auth.log that it tries to connect to other servers.
This is the log file:
Aug 31 08:04:49 server_name sshd[16316]: error: connect_to ...
- 11
0
votes
0
answers
50
views
LogoFAIL virus vulnerabilities
So I recently saw this video talking about a vulnerability in Linux to a virus called LogoFAIL. https://youtu.be/2QFJLszvDwg?si=VN5nyFKOwqWTyIwa Does anyone know if there are any plans to patch this ...
0
votes
0
answers
108
views
OverlayFS CVE-2021-3493 Patch
I am unable to patch OverlayFS vulnerability (CVE-2021-3493). They said in github that it is patched in 5.11 kernel however i have installed multiple kernels (5.11,5.15,6.2 etc) and also compiled from ...
0
votes
1
answer
105
views
OpenSSL Vulnerability/Update
I am receiving a critical vulnerability on Ubuntu 20.04 for OpenSSL. The vulnerability is calling for an update from 1.1.1f to 1.1.1l. I have 1.1.1q installed. Is this a false-positive?
0
votes
0
answers
233
views
How can I fix the vulnerability CVE-2021-3449?
I have installed nodejs package (version 18.16.1-deb-1nodesource1) on Ubuntu 22.04. Trivy vulnerability scan identified CVE-2021-3449. It is related to OpenSSL version 1.1.1 to 1.1.1j. But the OpenSSL ...
- 11
0
votes
2
answers
448
views
Being told to update apache due to Vulnerabilities
we are running Ubuntu 16.04 LTS with Apache/2.4.18 (Ubuntu)..
Yesterday, I got an email from our main computing body asking us to upgrade Apache due to vulnerabilities in version 2.4.43 and prior: ...
- 21
0
votes
0
answers
92
views
Are ext2/3/4 USB Drives a critical threat to a Linux System?
I found this discussion here where those people seemed to decide weather ext filesystems should support the masquerading of the uid/gid similar to how a vfat/ntfs filesystems work when they are ...
0
votes
1
answer
326
views
When Thunderbird Vulnerability Updates will be available for Version 52.9.1 in Ubuntu 16.04
I have Thunderbird version 52.9.1 (64-bit) installed in Ubuntu 16.04.4 LTS.
As Thunderbird version 52.9.1 has multiple vulnerabilities (CVE 2018 5156, CVE 2018 5187, CVE 2018 12371, CVE 2018 12361, ...
- 1
0
votes
0
answers
59
views
Available Kernel Updates
I've always been kinda picky and skeptical about kernel updates from one version to another(like 4.15.0.x to 4.15.0.y). I have the following updates available in my software updater...
I usually don'...
