Lucene search

K
redosRedosROS-20240409-12
HistoryApr 09, 2024 - 12:00 a.m.

ROS-20240409-12

2024-04-0900:00:00
redos.red-soft.ru
7
vulnerability
zlib
eclipse jetty
buffer boundaries
remote attacker
arbitrary code
servlet container
input data length
an attacker
http request smuggling
unix

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

71.2%

A vulnerability in the inflate.c component of the zlib library is related to an operation exceeding buffer boundaries in memory.
Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code

Eclipse Jetty servlet container vulnerability is related to errors in processing input data length parameters.
data length parameters. Exploitation of the vulnerability could allow an attacker acting remotely to execute
arbitrary commands

Eclipse Jetty servlet container vulnerability is related to errors in processing input data length parameters.
data length parameters. Exploitation of the vulnerability could allow an attacker acting remotely to execute an attack such as
“HTTP request smuggling” attack

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64apache-kafka<= 3.6.1-1UNKNOWN

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

71.2%