38 matches found
SUSE-SU-2023:3866-1 Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. bsc1214796, bsc1213441 - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base name. bsc1214797, bsc1193948 Bugs...
SUSE-SU-2023:3863-1 Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. bsc1214796, bsc1213441 - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base name. bsc1214797, bsc1193948 Bugs...
Fedora 37 : salt (2023-ac1aa963e4)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ac1aa963e4 advisory. Fixes for CVE-2023-20897 and CVE-2023-20898 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
CVE-2023-20897
creationtimestamp| type| source ---|---|--- 2023-09-05 14:16:55+00:00| seen| https://t.me/cibsecurity/69848...
CVE-2023-20897
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted...
CVE-2023-20897
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted...
CVE-2023-20897
SaltStack CVE-2023-20897 affects Salt masters prior to 3005.2 or 3006.2, which suffer a DOS in minion return: after receiving several bad packets equal to the worker-thread count, the master becomes unresponsive to return requests until restart. Remediation: upgrade to at least 3005.2/3006.2 or n...
CVE-2023-20897
Removed by vendor...
CVE-2023-20897
Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted...
Atlassian Jira 7.0.6 < 8.5.4 Multiple Vulnerabilities
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is version 7.0.6 prior to 8.5.4 or 8.6.x prior to 8.7.1. It is, therefore, affected by multiple vulnerabilities: - A flaw which permits remote attackers to achieve Denial of Service via a...
Atlassian Jira 8.6.0 < 8.7.1 Multiple Vulnerabilities
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is version 7.0.6 prior to 8.5.4 or 8.6.x prior to 8.7.1. It is, therefore, affected by multiple vulnerabilities: - A flaw which permits remote attackers to achieve Denial of Service via a...
CVE-2020-20897
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22035. Reason: This candidate is a duplicate of CVE-2020-22035. Notes: All CVE users should reference CVE-2020-22035 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2020-20897
CVE-2020-20897 is a duplicate of CVE-2020-22035; refer to CVE-2020-22035 for details. The connected documents describe a heap-based Buffer Overflow in FFmpeg 4.2, specifically in get_block_row() implemented in libavfilter/vf_bm3d.c, which can lead to memory corruption and potential impact. Affect...
CVE-2019-20897
creationtimestamp| type| source ---|---|--- 2020-07-13 07:55:02+00:00| seen| https://t.me/cibsecurity/13419...
CVE-2019-20897
CVE-2019-20897 affects Atlassian Jira Server and Data Center via the avatar-upload feature, enabling Denial of Service with a crafted PNG. Affected ranges: < 8.5.4, 8.6.0 ≤ 8.6.x < 8.6.2, and 8.7.0
DoS in avatar upload via crafted PNG file - CVE-2019-20897
The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achieve Denial of Service via a crafted PNG file. Affected versions version 8.5.4 8.6.0 ≤ version ≤ 8.7.0 8.7.0 ≤ version 8.7.1 Fixed versions 8.5.4 8.7.1 8.8.0...
CVE-2018-20897
CVE-2018-20897 affects cPanel before 71.9980.37, enabling arbitrary file unlink operations through the cPAddons moderation system (SEC-395). The vulnerability’s impact is described as unauthorized file deletion within the hosting control panel environment; no exploitation details are provided in ...