Lucene search
PhotonPHSA-2023-3.0-0518HistoryJan 19, 2023 - 12:00 a.m.
Important Photon OS Security Update - PHSA-2023-3.0-0518
2023-01-1900:00:00
github.com
32
photon os
security update
phsa-2023
apache-tomcat
krb5
sudo
e2fsprogs
unix
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.3%
Updates of [‘krb5’, ‘apache-tomcat’, ‘e2fsprogs’, ‘sudo’] packages of Photon OS have been released.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Photon | 3.0 | x86_64 | krb5-devel | < 1.17-4.ph3 | krb5-devel-1.17-4.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | sudo | < 1.9.5-5.ph3 | sudo-1.9.5-5.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | e2fsprogs-devel | < 1.46.5-2.ph3 | e2fsprogs-devel-1.46.5-2.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | krb5-lang | < 1.17-4.ph3 | krb5-lang-1.17-4.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | e2fsprogs-lang | < 1.46.5-2.ph3 | e2fsprogs-lang-1.46.5-2.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | e2fsprogs-libs | < 1.46.5-2.ph3 | e2fsprogs-libs-1.46.5-2.ph3.x86_64.rpm |
| Photon | 3.0 | noarch | apache-tomcat | < 8.5.84-1.ph3 | apache-tomcat-8.5.84-1.ph3.noarch.rpm |
| Photon | 3.0 | x86_64 | krb5 | < 1.17-4.ph3 | krb5-1.17-4.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | e2fsprogs | < 1.46.5-2.ph3 | e2fsprogs-1.46.5-2.ph3.x86_64.rpm |
Related
photon
photon
Important Photon OS Security Update - PHSA-2023-0518
2023-01-19 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0314
2023-01-17 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0165
2023-12-08 00:00:00
redhat
redhat
(RHSA-2023:0283) Important: sudo security update
2023-01-23 08:22:53
nessus
nessus
RHEL 7 / 9 : Red Hat JBoss Web Server 5.7.2 release and (RHSA-2023:1663)
2023-04-12 00:00:00
Debian DSA-5381-1 : tomcat9 - security update
2023-04-06 00:00:00
GLSA-202305-37 : Apache Tomcat: Multiple Vulnerabilities
2023-05-30 00:00:00
ibm
ibm
osv
osv
tomcat9 - security update
2023-04-05 00:00:00
Important: sudo security update
2023-01-23 08:22:52
sudo vulnerability
2023-01-30 13:51:21
debian
debian
[SECURITY] [DSA 5381-1] tomcat9 security update
2023-04-05 20:07:07
openvas
openvas
Debian: Security Advisory (DSA-5381-1)
2023-04-06 00:00:00
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2023-1341)
2023-02-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4303-1)
2022-12-02 00:00:00
gentoo
gentoo
Apache Tomcat: Multiple Vulnerabilities
2023-05-30 00:00:00
sudo: Root Privilege Escalation
2023-05-03 00:00:00
kaspersky
kaspersky
KLA20034 SB vulnerability in Apache Tomcat
2022-10-10 00:00:00
KLA20032 SB vulnerability in Apache Tomcat
2022-10-07 00:00:00
KLA20148 ACE vulnerability in Apache Tomcat
2022-11-21 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 9.0.68
2022-10-07 00:00:00
Fixed in Apache Tomcat 10.1.2
2022-11-14 00:00:00
Fixed in Apache Tomcat 10.0.27
2022-10-10 00:00:00
cnvd
cnvd
Apache Tomcat Environment Issue Vulnerability (CNVD-2022-74082)
2022-11-02 00:00:00
cve
cve
cvelist
cvelist
CVE-2022-45143 Apache Tomcat: JsonErrorReportValve escaping
2023-01-03 18:12:28
CVE-2022-42252 Apache Tomcat request smuggling via malformed content-length
2022-11-01 00:00:00
prion
prion
Design/Logic Flaw
2023-01-03 19:15:00
Cross site request forgery (csrf)
2022-11-01 09:15:00
Design/Logic Flaw
2023-01-18 17:15:00
veracode
veracode
Arbitrary Code Injection
2023-01-09 18:49:15
HTTP Request Smuggling
2022-11-02 05:50:14
Denial Of Service (DoS)
2022-11-21 15:06:29
atlassian
atlassian
github
github
Apache Tomcat improperly escapes input from JsonErrorReportValve
2023-01-03 21:30:21
Apache Tomcat may reject request containing invalid Content-Length header
2022-11-01 12:00:30
ubuntucve
ubuntucve
redhatcve
redhatcve
CVE-2022-45143
2023-01-06 06:04:53
CVE-2022-42252
2022-11-09 14:26:30
nvd
nvd
CVE-2022-42252
2022-11-01 09:15:10
amazon
amazon
Important: sudo
2023-03-02 22:36:00
Important: sudo
2023-01-31 20:44:00
Important: krb5
2023-01-18 20:56:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2075
2023-01-31 12:50:07
Advisory ROSA-SA-2024-2396
2024-04-11 07:39:43
cbl_mariner
cbl_mariner
CVE-2023-22809 affecting package sudo for versions less than 1.9.12p2-1
2023-02-24 01:54:46
CVE-2023-22809 affecting package sudo 1.9.12p1-1
2023-03-02 04:18:33
almalinux
almalinux
Important: sudo security update
2023-01-23 00:00:00
Important: sudo security update
2023-01-23 00:00:00
f5
f5
K000132667 : Sudo vulnerability CVE-2023-22809
2023-02-20 00:00:00
K000133224 : Apache Tomcat vulnerability CVE-2022-42252
2023-03-28 00:00:00
githubexploit
githubexploit
Exploit for Improper Privilege Management in Sudo Project Sudo
2023-06-20 00:38:08
Exploit for Improper Privilege Management in Sudo Project Sudo
2023-08-06 06:46:40
Exploit for Improper Privilege Management in Sudo Project Sudo
2023-06-08 18:39:44
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-06-02 16:20:56
freebsd
freebsd
Tomcat -- Request Smuggling
2022-10-31 00:00:00
mageia
mageia
Updated sudo packages fix security vulnerability
2023-01-24 10:58:25
redos
redos
ROS-20230124-01
2023-01-24 00:00:00
rocky
rocky
sudo security update
2023-01-23 08:22:52
sudo security update
2023-01-23 08:23:15
debiancve
debiancve
CVE-2023-22809
2023-01-18 17:15:10
CVE-2022-42252
2022-11-01 09:15:10
oraclelinux
oraclelinux
sudo security update
2023-01-23 00:00:00
sudo security update
2023-02-28 00:00:00
sudo security update
2023-01-24 00:00:00
cloudlinux
cloudlinux
sudo: Fix of CVE-2023-22809
2023-02-09 23:32:51
paloalto
paloalto
Impact of Sudo Vulnerability CVE-2023-22809
2023-02-08 17:00:00
ubuntu
ubuntu
Sudo vulnerability
2023-01-18 00:00:00
zdt
zdt
sudo 1.8.0 to 1.9.12p1 - Privilege Escalation Exploit
2023-04-03 00:00:00
cisa
cisa
Samba Releases Security Updates
2022-11-16 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: samba-4.17.3-0.fc37
2022-11-18 01:18:28
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.3%
Related for PHSA-2023-3.0-0518