CVE-2023-21996

CVE-2023-21996 affects Oracle WebLogic Server (Web Services component) with affected versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. The vulnerability allows an unauthenticated attacker, over HTTP, to cause a hang or frequent crash (DOS). The F5 advisory consolidates this vulnerability under CVE...

CVE-2023-21996

...

SUSE CVE-2021-21996

An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and sourcehash URLs can gain full file system access as root on a salt minion...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20201105.2286)

The version of AHV installed on the remote host is prior to 20201105.2286. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20201105.2286 advisory. - In Expat aka libexpat before 2.4.5, there is an integer overflow in storeRawNames. CVE-2022-25315 - In Expat ak...

CVE-2022-21996

Win32k Elevation of Privilege Vulnerability...

CVE-2022-21996

creationtimestamp| type| source ---|---|--- 2022-02-09 16:38:51+00:00| seen| https://t.me/NeKaspersky/1786...

CVE-2022-21996

Technical details for CVE-2022-21996 are not publicly available in the provided documents. Monitor for updates; current sources indicate Win32k elevation of privilege but lack concrete impacted products, versions, root cause, or remediation in this set.

CVE-2022-21996 Win32k Elevation of Privilege Vulnerability

...

Microsoft Patch Tuesday, February 2022 Edition

Microsoft today released software updates to plug security holes in its Windows operating systems and related software. This months relatively light patch batch is refreshingly bereft of any zero-day threats, or even scary critical vulnerabilities. But it does fix four dozen flaws, including...

Microsoft Win32k Elevation of Privilege (CVE-2022-21996)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2021-21996

An Exposure of Resource to Wrong Sphere flaw was found in Salt. This flaw allows a user who has control of the source and sourcehash URLs to gain full file system access as root on a Salt minion...

[SECURITY] [DLA 2823-2] salt regression update

Debian LTS Advisory DLA-2823-2 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 21, 2021 https://wiki.debian.org/LTS Package : salt Version : 2016.11.2+ds-1+deb9u9 CVE ID : CVE-2021-21996 Debian Bug : 1000265 The security update of Salt, a remote execution...

elita (>=0.60.0 <=0.64.1), slskit (>=2020.1.1 <=2020.9.0) potentially affected by CVE-2021-21996 via salt (>=2014.1.10 <=3001.8.0)

salt PYPI version =2014.1.10, =0.60.0, =2020.1.1, =2020.9.0 Source cves: CVE-2021-21996 Source advisory: OSV:GHSA-PF7H-H2WQ-M7PG...

Debian DLA-2823-1 : salt - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2823 advisory. - An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and sourcehash URLs can gain full file system access as root on a salt...

openSUSE 15 Security Update : salt (openSUSE-SU-2021:1443-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1443-1 advisory. - An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and sourcehash URLs can gain full file system acces...

openSUSE: Security Advisory for salt (openSUSE-SU-2021:1443-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for salt (moderate)

openSUSE Security Update: Security update for salt Announcement ID: openSUSE-SU-2021:1443-1 Rating: moderate References: 1190265 Cross-References: CVE-2021-21996 CVSS scores: CVE-2021-21996 SUSE: 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Leap 15.2 An update that...

openSUSE 15 Security Update : salt (openSUSE-SU-2021:3557-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3557-1 advisory. - An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and sourcehash URLs can gain full file system acces...

SUSE SLES15: python3-salt / salt / salt-api / salt-bash-completion / salt-cloud / etc (SUSE-SU-2021:3553-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3553-1 advisory. salt: - Support querying for JSON data in external sql pillar - Exclude the full path of a download URL to prevent injection of malicious co...

SUSE SLES12: python2-salt / salt / salt-api / salt-bash-completion / salt-cloud / etc (SUSE-SU-2021:3550-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:3550-1 advisory. salt: - Fix the regression of dockercontainer state module - Support querying for JSON data in external sql pillar - Exclude the full path of a downloa...