PatchTheCVEdan bernstein vulnerabilities
Recent CVEs affecting dan bernstein products. 2 tracked.
dan bernstein has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-05-11. Highest priority: CVE-2005-1515 (score 46/100).
- CVE-2005-1515 MEDIUM 5.0 MITIGATE Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platform
- CVE-2005-1514 MEDIUM 5.0 MITIGATE commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote att
FAQ
How do I fix dan bernstein vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dan bernstein being exploited right now?
None of the tracked dan bernstein CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dan bernstein CVE should I patch first?
CVE-2005-1515 currently ranks highest (46/100): Integer signedness error in the qmail_put and substdio_put functions in qmail, when running on 64 bit platform.