PT-2023-9028 · Unknown +11 · Crypto/Tls +11

🗓️ 15 Feb 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 19 Views

Large handshake records may cause panics in Transport Layer Security, affecting multiple clients and servers.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: CVE-2022-2879, CVE-2022-41715, CVE-2022-2880, CVE-2022-41717, CVE-2022-41716 may affect IBM CICS TX Advanced	16 Mar 202315:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Go may affect IBM CICS TX Standard	24 Feb 202310:43	–	ibm
IBM Security Bulletins	Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl, pcre2 and Golang Go	31 Aug 202216:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling was built with a vulnerable golang compiler. ( CVE-2023-29406, CVE-2023-29409 )	6 Dec 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Dec 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Golang Go (CVE-2022-41724)	27 Jul 202317:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and the IntegrationServer and IntegrationRuntime operands are vulnerable to networking errors [CVE-2024-24790]	23 Aug 202409:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to glibc, Golang Go , Apache HTTP, IBM GSKit-Crypto and GnuTLS packages/liberaries .	22 May 202409:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands and operator are vulnerable to [CVE-2023-24532]	28 Jun 202315:04	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties affects IBM Watson Machine Learning Accelerator 3.5.0 for Cloud Pak for Data 4.6.5	8 Feb 202419:05	–	ibm

Source	Link
github	www.github.com/hex0punk/cont-flood-poc
linux	www.linux.oracle.com/errata/ELSA-2023-6402.html
ubuntu	www.ubuntu.com/security/CVE-2023-24537
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2024-07025
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
linux	www.linux.oracle.com/errata/ELSA-2023-6473.html
osv	www.osv.dev/vulnerability/openSUSE-SU-2024:12707-1
ubuntu	www.ubuntu.com/security/CVE-2024-24789
bdu	www.bdu.fstec.ru/vul/2023-07013

14 Nov 2024 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 26 - 7.8

CVSS 3.19.8

EPSS0.91969

SSVC