Security Bulletin: IBM Sterling Control Center v6.2.1 and v6.3.1 is vulnerable and reported in [All] Spring Framework.

Summary Security Bulletin: Sterling Control Center v6.2.1 and v6.3.1 is vulnerable in All Spring Framework for CVE-2024-22233 Publicly disclosed vulnerability. Vulnerability Details CVEID:CVE-2024-22233 DESCRIPTION: VMware Tanzu Spring Framework is vulnerable to a denial of service, caused by a...

GitLab 13.10 < 13.11.6 / 13.12 < 13.12.6 / 14.0 < 14.0.2 (CVE-2021-22233)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details CVE-2021-22233 Note that Nessus has not tested for this issue but has instead relie...

ai.djl.spring:djl-spring-boot-starter-autoconfigure (=0.26), ai.djl.spring:djl-spring-boot-starter-mxnet-auto (=0.26) +3944 more potentially affected by CVE-2024-22233 via org.springframework:spring-core (>=6.1.2 <=6.1.21)

org.springframework:spring-core MAVEN version =6.1.2, =0.25.7-rc.6, =0.8.0.BETA, =1.0.2, =1.0.2, =1.0.2, =1.0.6 and more Source cves: CVE-2024-22233 Source advisory: OSV:GHSA-R4Q3-7G4Q-X89M...

CVE-2024-22233

creationtimestamp| type| source ---|---|--- 2024-01-22 14:21:53+00:00| seen| https://t.me/ctinow/171173 2024-01-22 22:16:35+00:00| seen| https://t.me/ctinow/171471 2024-01-26 20:14:50+00:00| seen| https://t.me/arpsyndicate/3055 2024-01-28 03:50:07+00:00| seen| https://t.me/arpsyndicate/3191...

CVE-2024-22233 vulnerabilities

Vulnerabilities for packages: jenkins...

CVE-2024-22233 vulnerabilities

Vulnerabilities for packages: jenkins...

CVE-2024-22233 CVE-2024-22233: Spring Framework server Web DoS Vulnerability

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC Spring Security 6.1....

CVE-2024-22233 CVE-2024-22233: Spring Framework server Web DoS Vulnerability

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC Spring Security 6.1....

CVE-2024-22233

In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition. Specifically, an application is vulnerable when all of the following are true: the application uses Spring MVC Spring Security 6.1....

CVE-2024-22233

The CVE-2024-22233 entry describes a denial-of-service (DoS) vulnerability in VMware Tanzu Spring Framework when using Spring MVC with Spring Security on the classpath. Affected versions are Spring Framework 6.0.15 and 6.1.2. The DoS condition can be triggered by specially crafted HTTP requests. ...

CVE-2024-22233: Spring Framework server Web DoS Vulnerability

The Spring Framework 6.0.16 and 6.1.3 releases shipped on January 11th includes a fix for CVE-2024-22233. The Spring Boot 3.1.8 and 3.2.2 releases shipped last week upgrade to the relevant Spring Framework versions. Users are encouraged to update as soon as possible...

This Week in Spring - January 23rd, 2024

Hi, Spring fans, and greetings from CERN, home of the famous Large Hadron Collider, where I'm speaking again at the VOXXED Days CERN 2017 event. It's been an amazing almost week here in lovely Switzerland, first in Lugano for VOXXED Days Ticino, and now in Geneva. I'm super excited to be here, bu...

VMware Spring Boot 3.1.7 / 3.2.1 DoS Vulnerability

VMware Spring Boot is prone to a denial of service DoS vulnerability in the used Spring Framework. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2023-22233

creationtimestamp| type| source ---|---|--- 2023-02-18 00:13:28+00:00| seen| https://t.me/cibsecurity/58477...

CVE-2023-22233 Adobe After Effects Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction...

CVE-2023-22233

Adobe After Effects is affected by CVE-2023-22233, an out-of-bounds read vulnerability impacting After Effects versions 23.1 and earlier, and 22.6.3 and earlier. The issue could disclose sensitive memory and bypass ASLR; exploitation requires the victim to open a malicious file. Public citations ...

CVE-2022-22233

An Unchecked Return Value to NULL Pointer Dereference vulnerability in Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. In Segment Routing SR to Label Distribution Protocol L...

CVE-2022-22233 Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash

An Unchecked Return Value to NULL Pointer Dereference vulnerability in Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. In Segment Routing SR to Label Distribution Protocol L...

CVE-2022-22233

CVE-2022-22233 concerns Juniper Networks Junos OS and Junos OS Evolved. The issue is an unchecked return value leading to a NULL pointer dereference in the Routing Protocol Daemon (rpd) when operating in an SR→LDP interworking scenario with SRMS, allowing a locally authenticated, low-privilege at...

CVE-2022-22233 Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash

An Unchecked Return Value to NULL Pointer Dereference vulnerability in Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. In Segment Routing SR to Label Distribution Protocol L...