Lucene search

OracleLinuxELSA-2024-0143

HistoryJan 12, 2024 - 12:00 a.m.

idm:DL1 security update

2024-01-1200:00:00

linux.oracle.com

idm

dl1

security update

opendnssec

custodia

ipa

csrf protection

vulnerability

buffer tcp data

address sorting

6.6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.027 Low

EPSS

Percentile

90.4%

JSON

bind-dyndb-ldap
custodia
ipa
[4.9.12-11.0.1]

Resolves: 2242828 Invalid CSRF protection (CVE-2023-5455)
ipa-healthcheck
opendnssec
python-jwcrypto
python-kdcproxy
[0.4-5]
Always buffer TCP data in __handle_recv()
Resolves: #1747144
[0.4-4]
Correct addrs sorting to be by TCP/UDP
Resolves: #1732898
python-qrcode
python-yubico
pyusb
slapi-nis
softhsm

OSVersionArchitecturePackageVersionFilename
oracle linux8srcbind-dyndb-ldap< 11.6-4.modulebind-dyndb-ldap-11.6-4.module+el8.9.0+90094+20819f5a.src.rpm
oracle linux8srccustodia< 0.6.0-3.modulecustodia-0.6.0-3.module+el8.9.0+90094+20819f5a.src.rpm
oracle linux8srcipa< 4.9.12-11.0.1.moduleipa-4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d.src.rpm
oracle linux8srcipa-healthcheck< 0.12-3.moduleipa-healthcheck-0.12-3.module+el8.9.0+90094+20819f5a.src.rpm
oracle linux8srcopendnssec< 2.1.7-1.moduleopendnssec-2.1.7-1.module+el8.9.0+90094+20819f5a.src.rpm
oracle linux8srcpython-jwcrypto< 0.5.0-1.1.modulepython-jwcrypto-0.5.0-1.1.module+el8.9.0+90094+20819f5a.src.rpm
oracle linux8srcpython-kdcproxy< 0.4-5.modulepython-kdcproxy-0.4-5.module+el8.9.0+90122+3305dc1d.src.rpm
oracle linux8srcpython-qrcode< 5.1-12.modulepython-qrcode-5.1-12.module+el8.9.0+90094+20819f5a.src.rpm
oracle linux8srcpython-yubico< 1.3.2-9.1.modulepython-yubico-1.3.2-9.1.module+el8.9.0+90094+20819f5a.src.rpm
oracle linux8srcpyusb< 1.0.0-9.1.modulepyusb-1.0.0-9.1.module+el8.9.0+90094+20819f5a.src.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	bind-dyndb-ldap	< 11.6-4.module	bind-dyndb-ldap-11.6-4.module+el8.9.0+90094+20819f5a.src.rpm
oracle linux	8	src	custodia	< 0.6.0-3.module	custodia-0.6.0-3.module+el8.9.0+90094+20819f5a.src.rpm
oracle linux	8	src	ipa	< 4.9.12-11.0.1.module	ipa-4.9.12-11.0.1.module+el8.9.0+90122+3305dc1d.src.rpm
oracle linux	8	src	ipa-healthcheck	< 0.12-3.module	ipa-healthcheck-0.12-3.module+el8.9.0+90094+20819f5a.src.rpm
oracle linux	8	src	opendnssec	< 2.1.7-1.module	opendnssec-2.1.7-1.module+el8.9.0+90094+20819f5a.src.rpm
oracle linux	8	src	python-jwcrypto	< 0.5.0-1.1.module	python-jwcrypto-0.5.0-1.1.module+el8.9.0+90094+20819f5a.src.rpm
oracle linux	8	src	python-kdcproxy	< 0.4-5.module	python-kdcproxy-0.4-5.module+el8.9.0+90122+3305dc1d.src.rpm
oracle linux	8	src	python-qrcode	< 5.1-12.module	python-qrcode-5.1-12.module+el8.9.0+90094+20819f5a.src.rpm
oracle linux	8	src	python-yubico	< 1.3.2-9.1.module	python-yubico-1.3.2-9.1.module+el8.9.0+90094+20819f5a.src.rpm
oracle linux	8	src	pyusb	< 1.0.0-9.1.module	pyusb-1.0.0-9.1.module+el8.9.0+90094+20819f5a.src.rpm