Questions tagged [cve]

Common Vulnerabilities and Exposures

International in scope and free for public use, CVE is a dictionary of publicly known information security vulnerabilities and exposures. CVE’s common identifiers enable data exchange between security products and provide a baseline index point for evaluating coverage of tools and services.

https://cve.mitre.org/

19 questions
0
votes
2 answers

How can I reliably discover CVEs relating to installed packages

I have a web application running on Ubuntu Server 18. One of its dependencies is Ghostscript. The latest version I'm able to install via apt-get is 9.26, but I've learned that this version has a security issue. What I'm looking for is a way of…
griswoldbar
  • 115
  • 3
0
votes
0 answers

Not able to upgrade OpenSSL version from 1.1.1g to 1.1.1l in RHEL 8.4

I have Linux machine RHEL 8.4 with OpenSSL 1.1.1g. After running the vulnerability and penetration testing, It was found that this version of OpenSSL is not secured and recommended to upgrade OpenSSL 1.1.1g --> 1.1.1l When I'm giving the…
0
votes
1 answer

SpectreV1 Mitigation Performance profiling

I am trying to measure the system performance when spectreV1 mitigation is on. I am using stress-ng for that. So far I have tested the system with various stressors like cpu, qsort, str, matrix, tsearch, lsearch, sem, switch and mq. I am looking at…
awatan
  • 101
  • 1
  • 4
-3
votes
1 answer

CVE-2021-26855 Explanation

I patched on 3/3 This just looks like we were probed and not compromised, can some one please confirm? I'm not sure how to interpret this. Ran Test-Hafnium.ps1 Contents of CVE-2021-26855.log #TYPE…
kausner
  • 77
  • 6
1
2