Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
photonPhotonPHSA-2024-4.0-0591
HistoryApr 11, 2024 - 12:00 a.m.

Important Photon OS Security Update - PHSA-2024-4.0-0591

2024-04-1100:00:00
github.com
2
photon os
security update
phsa-2024-4.0-0591
httpd
nghttp2
util-linux
bluez
linux-rt
linux-aws
iperf

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.5%

JSON

Updates of [‘bluez’, ‘iperf’, ‘linux’, ‘linux-secure’, ‘linux-rt’, ‘linux-aws’, ‘nghttp2’, ‘httpd’, ‘util-linux’] packages of Photon OS have been released.

OSVersionArchitecturePackageVersionFilename
Photon4.0x86_64linux-esx-devel< 5.10.214-1.ph4linux-esx-devel-5.10.214-1.ph4.x86_64.rpm
Photon4.0x86_64util-linux-lang< 2.37.4-2.ph4util-linux-lang-2.37.4-2.ph4.x86_64.rpm
Photon4.0x86_64linux-aws-docs< 5.10.214-1.ph4linux-aws-docs-5.10.214-1.ph4.x86_64.rpm
Photon4.0x86_64linux-secure-devel< 5.10.214-1.ph4linux-secure-devel-5.10.214-1.ph4.x86_64.rpm
Photon4.0x86_64linux-aws< 5.10.214-1.ph4linux-aws-5.10.214-1.ph4.x86_64.rpm
Photon4.0x86_64linux< 5.10.214-1.ph4linux-5.10.214-1.ph4.x86_64.rpm
Photon4.0x86_64linux-drivers-gpu< 5.10.214-1.ph4linux-drivers-gpu-5.10.214-1.ph4.x86_64.rpm
Photon4.0x86_64linux-tools< 5.10.214-1.ph4linux-tools-5.10.214-1.ph4.x86_64.rpm
Photon4.0x86_64linux-oprofile< 5.10.214-1.ph4linux-oprofile-5.10.214-1.ph4.x86_64.rpm
Photon4.0x86_64linux-rt< 5.10.214-1.ph4linux-rt-5.10.214-1.ph4.x86_64.rpm
Rows per page:
1-10 of 381

Related

photon 6
nessus 45
debiancve 11
nvd 10
cvelist 10
redhatcve 11
cve 8
alpinelinux 4
vulnrichment 3
openvas 22
veracode 4
zdi 5
osv 12
redos 4
mageia 2
packetstorm 1
ubuntu 2
ubuntucve 6
debian 1
githubexploit 3
fedora 4
ibm 1
redhat 4
oraclelinux 3
slackware 2
f5 2
cbl_mariner 3
cloudfoundry 1
amazon 3
rocky 2
cgr 1
almalinux 2
hackerone 1
photon
photon
Important Photon OS Security Update - PHSA-2024-3.0-0747
2024-04-08 00:00:00
Moderate Photon OS Security Update - PHSA-2024-5.0-0238
2024-04-03 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0242
2024-04-10 00:00:00
nessus
nessus
Oracle Linux 9 : nghttp2 (ELSA-2024-3501)
2024-06-21 00:00:00
Debian dsa-5650 : bsdextrautils - security update
2024-03-31 00:00:00
SUSE SLES15 Security Update : util-linux (SUSE-SU-2024:1170-1)
2024-04-10 00:00:00
debiancve
debiancve
CVE-2023-51592
2024-05-03 03:16:19
CVE-2023-51589
2024-05-03 03:16:19
CVE-2023-51580
2024-05-03 03:16:17
nvd
nvd
CVE-2023-51596
2024-05-03 03:16:20
CVE-2023-51589
2024-05-03 03:16:19
CVE-2023-51592
2024-05-03 03:16:19
cvelist
cvelist
CVE-2023-51592 BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability
2024-05-03 02:15:21
CVE-2023-51589 BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability
2024-05-03 02:15:19
CVE-2023-44431 BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability
2024-05-03 02:13:57
redhatcve
redhatcve
CVE-2023-51580
2024-05-03 21:29:43
CVE-2023-51596
2024-05-03 21:30:03
CVE-2023-51589
2024-05-03 21:29:51
cve
cve
CVE-2023-51596
2024-05-03 03:16:20
CVE-2023-51589
2024-05-03 03:16:19
CVE-2023-51592
2024-05-03 03:16:19
alpinelinux
alpinelinux
CVE-2023-51596
2024-05-03 03:16:20
CVE-2023-51589
2024-05-03 03:16:19
CVE-2024-27316
2024-04-04 20:15:08
vulnrichment
vulnrichment
CVE-2023-51596 BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability
2024-05-03 02:15:24
CVE-2023-51589 BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability
2024-05-03 02:15:19
CVE-2023-44431 BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability
2024-05-03 02:13:57
openvas
openvas
Debian: Security Advisory (DSA-5650-1)
2024-04-01 00:00:00
openSUSE: Security Advisory for util (SUSE-SU-2024:1170-1)
2024-04-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1171-1)
2024-05-07 00:00:00
veracode
veracode
Escape Sequence Injection
2024-04-08 12:41:53
Denial Of Service (DoS)
2024-04-05 10:02:12
Memory Exhaustion
2024-04-10 19:25:29
zdi
zdi
(0Day) BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability
2023-12-21 00:00:00
(0Day) BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability
2023-12-21 00:00:00
(0Day) BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability
2023-12-21 00:00:00
osv
osv
CVE-2024-27316
2024-04-04 20:15:08
util-linux vulnerability
2024-04-10 12:24:42
util-linux - security update
2024-03-31 00:00:00
redos
redos
ROS-20240425-01
2024-04-25 00:00:00
ROS-20240425-06
2024-04-25 00:00:00
ROS-20240425-07
2024-04-25 00:00:00
mageia
mageia
Updated util-linux packages fix security vulnerability
2024-04-06 22:53:46
Updated nghttp2 packages fix security vulnerability
2024-04-17 05:13:57
packetstorm
packetstorm
util-linux wall Escape Sequence Injection
2024-03-28 00:00:00
ubuntu
ubuntu
util-linux vulnerability
2024-03-27 00:00:00
util-linux vulnerability
2024-04-10 00:00:00
ubuntucve
ubuntucve
CVE-2024-28085
2024-03-27 00:00:00
CVE-2024-26642
2024-03-21 00:00:00
CVE-2023-7250
2024-03-18 00:00:00
debian
debian
[SECURITY] [DSA 5650-1] util-linux security update
2024-03-31 11:50:05
githubexploit
githubexploit
Exploit for CVE-2024-28085
2024-03-11 00:15:03
Exploit for Allocation of Resources Without Limits or Throttling in Apache Http Server
2024-04-17 20:08:05
Exploit for Allocation of Resources Without Limits or Throttling in Apache Http Server
2024-04-09 08:08:07
fedora
fedora
[SECURITY] Fedora 40 Update: mod_http2-2.0.27-1.fc40
2024-04-21 01:08:56
[SECURITY] Fedora 40 Update: nghttp2-1.59.0-3.fc40
2024-04-19 21:41:43
[SECURITY] Fedora 38 Update: nghttp2-1.52.0-3.fc38
2024-04-20 02:14:40
ibm
ibm
Security Bulletin: IBM Aspera Console has addressed a denial of service vulnerability (CVE-2024-27316)
2024-05-29 21:22:20
redhat
redhat
(RHSA-2024:1786) Important: httpd:2.4/mod_http2 security update
2024-04-11 15:27:17
(RHSA-2024:2907) Moderate: httpd:2.4 security update
2024-05-20 01:02:25
(RHSA-2024:3501) Moderate: nghttp2 security update
2024-05-30 12:07:46
oraclelinux
oraclelinux
mod_http2 security update
2024-05-07 00:00:00
nghttp2 security update
2024-06-20 00:00:00
mod_http2 security update
2024-04-18 00:00:00
slackware
slackware
[slackware-security] util-linux
2024-03-28 21:56:23
[slackware-security] nghttp2
2024-04-04 19:17:04
f5
f5
K000139140 : util-linux vulnerability CVE-2024-28085
2024-04-01 00:00:00
K000139225: nghttp2 vulnerability CVE-2024-28182
2024-04-10 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-28085 affecting package util-linux for versions less than 2.37.4-9
2024-04-19 23:01:58
CVE-2024-28182 affecting package nodejs for versions less than 20.14.0-1
2024-06-21 09:32:44
CVE-2023-7250 affecting package iperf3 for versions less than 3.17-1
2024-06-12 22:23:00
cloudfoundry
cloudfoundry
USN-6719-2: util-linux vulnerability | Cloud Foundry
2024-05-23 00:00:00
amazon
amazon
Important: nghttp2
2024-05-09 17:43:00
Important: mod_http2
2024-04-24 22:15:00
Important: nghttp2
2024-04-24 22:15:00
rocky
rocky
nghttp2 security update
2024-06-14 14:00:33
httpd:2.4/mod_http2 security update
2024-05-06 13:04:21
cgr
cgr
CVE-2024-28182 vulnerabilities
2024-05-19 03:07:16
almalinux
almalinux
Moderate: nghttp2 security update
2024-05-30 00:00:00
Moderate: mod_http2 security update
2024-04-30 00:00:00
hackerone
hackerone
Internet Bug Bounty: Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames
2024-04-08 20:33:40

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.5%

JSON
Related for PHSA-2024-4.0-0591
photon6nessus45debiancve11nvd10cvelist10redhatcve11cve8alpinelinux4vulnrichment3openvas22veracode4zdi5osv12redos4mageia2packetstorm1ubuntu2ubuntucve6debian1githubexploit3fedora4ibm1redhat4oraclelinux3slackware2f52cbl_mariner3cloudfoundry1amazon3rocky2cgr1almalinux2hackerone1