SUSE-SU-2022:3767-1 Recommended update for bind

This update for bind fixes the following issues: Update to release 9.16.33: - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations bsc1203614. - CVE-2022-3080: Fixed assertion failure when there was a stale CNAME in the cac...

Denial Of Service (DoS)

org.ini4j:ini4j is vulnerable to Denial of Service DoS attacks. The vulnerability is due to the fetch method in BasicProfile.java lacking circular dependency checks, which allows an attacker to cause a stack overflow exception resulting in Denial of Service. While the CVE claims that v0.5.4 is...

GHSA-JR6H-R7VG-F9MC org.ini4j allows attackers to cause a Denial of Service (DoS)

An issue in the fetch method in the BasicProfile class of org.ini4j before v0.5.4 allows attackers to cause a Denial of Service DoS via unspecified vectors...

org.ini4j allows attackers to cause a Denial of Service (DoS)

An issue in the fetch method in the BasicProfile class of org.ini4j before v0.5.4 allows attackers to cause a Denial of Service DoS via unspecified vectors...

CVE-2022-41404

An issue in the fetch method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service DoS via unspecified vectors...

CVE-2022-41404

An issue in the fetch method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service DoS via unspecified vectors...

DEBIAN-CVE-2022-41404

An issue in the fetch method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service DoS via unspecified vectors...

UBUNTU-CVE-2022-41404

An issue in the fetch method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service DoS via unspecified vectors...

Design/Logic Flaw

An issue in the fetch method in the BasicProfile class of org.ini4j before v0.5.4 allows attackers to cause a Denial of Service DoS via unspecified vectors...

CVE-2022-41404

The CVE-2022-41404 entry concerns the ini4j Java library. A flaw in the fetch() method of the BasicProfile class affects versions up to 0.5.4, allowing a Denial of Service (DoS) via unspecified vectors. Public references indicate remediation by upgrading ini4j to 0.5.4 (or later), with Debian LTS...

CVE-2022-41404

An issue in the fetch method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service DoS via unspecified vectors...

PT-2022-25845

Name of the Vulnerable Software and Affected Versions org.ini4j versions prior to 0.5.4 Description The issue is related to the fetch method in the BasicProfile class, allowing attackers to cause a Denial of Service DoS via unspecified vectors. Recommendations For versions prior to 0.5.4, update ...

org.ini4j 安全漏洞

org.ini4j is a collection of Online Gambling Agents, Online Togel, Online Poker, Online Casino, Soccer Gambling, Online Slots. A security vulnerability exists in versions prior to org.ini4j v0.5.4 that stems from a problem with the fetch method in the BasicProfile class that allows an attacker to...

CVE-2022-41404

An issue in the fetch method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service DoS via unspecified vectors...

CVE-2022-41404: Uncontrolled Resource Consumption

An issue in the fetch method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service DoS via unspecified vectors...

CVE-2022-41404

An issue in the fetch method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service DoS via unspecified vectors...

node-fetch: exposure of sensitive information to an unauthorized actor

A flaw was found in node-fetch. When following a redirect to a third-party domain, node-fetch was forwarding sensitive headers such as "Authorization," "WWW-Authenticate," and "Cookie" to potentially untrusted targets. This flaw leads to the exposure of sensitive information to an unauthorized...

Important: Red Hat Security Advisory: Service Registry (container images) release and security update [2.3.0.GA]

An update to the images for Red Hat Integration Service Registry is now available from the Red Hat Container Catalog. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact o...

cross-fetch: Exposure of Private Personal Information to an Unauthorized Actor

A flaw was found in the cross-fetch library when fetching a remote URL with a cookie when it gets to the Location response header. This flaw allows an attacker to hijack the account as the cookie is leaked...

node-fetch: exposure of sensitive information to an unauthorized actor

A flaw was found in node-fetch. When following a redirect to a third-party domain, node-fetch was forwarding sensitive headers such as "Authorization," "WWW-Authenticate," and "Cookie" to potentially untrusted targets. This flaw leads to the exposure of sensitive information to an unauthorized...