ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.0.3), ca.uhn.hapi.fhir:hapi-fhir-converter (4.0.3) +11 more potentially affected by CVE-2024-45294 +1 more via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (4.0.3)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r5 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.0.3 - ca.uhn.hapi.fhir:hapi-fhir-converter 4.0.3 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (5.1.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (5.1.0) +63 more potentially affected by CVE-2024-45294 +1 more via ca.uhn.hapi.fhir:org.hl7.fhir.r4 (5.1.0)

ca.uhn.hapi.fhir:org.hl7.fhir.r4 MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.r4 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 5.1.0 - ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver 5.1.0 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.4.0, <=5.4.2), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.4.0, <=5.4.2) +79 more potentially affected by CVE-2024-45294 +1 more via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (5.4.0)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.4.0, =5.4.0, =5.4.0, =5.4.0, =5.4.0, =5.4.0...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (>=5.7.7, <=5.7.9), ca.uhn.hapi.fhir:hapi-fhir-base-test-mindeps-client (>=5.7.7, <=5.7.9) +61 more potentially affected by CVE-2024-45294 +1 more via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.6.27)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.6.27 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin =5.7.7, =5.7.7, =5.7.7, =5.7.0,...

ca.uhn.hapi.fhir:hapi-fhir-jaxrsserver-base (>=4.0.0, <=4.0.1), ca.uhn.hapi.fhir:hapi-fhir-structures-dstu2.1 (>=4.0.0, <=4.0.1) potentially affected by CVE-2024-45294 +1 more via ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may (4.0.0)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu2016may and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jaxrsserver-base =4.0.0, =4.0.0, =4.0.1 Source cve...

ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin (5.6.5), ca.uhn.hapi.fhir:hapi-fhir-base-test-mindeps-client (5.6.5) +57 more potentially affected by CVE-2024-45294 +1 more via ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 (5.5.7)

ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 MAVEN version 5.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.dstu3 and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-base-test-jaxrsserver-kotlin 5.6.5 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.6.0, <=7.4.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.6.0, <=7.4.3) +153 more potentially affected by CVE-2024-45294 via ca.uhn.hapi.fhir:org.hl7.fhir.r5 (>=6.0.0, <=6.3.22)

ca.uhn.hapi.fhir:org.hl7.fhir.r5 MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =7.4.3 and more Source cves: CVE-2024-45294 Source advisory: GHSA-6CR6-PH3P-F5RF...

389-ds-base DoS

The vulnerability of the 389-ds-base package for Debian GNU/Linux and Red Hat Enterprise Linux exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures when changing the userPassword parameter using improperly...

Security Bulletin: IBM MQ Appliance is vulnerable to exposure of sensitive information (CVE-2023-5981 and CVE-2024-0533)

Summary IBM MQ Appliance has addressed GNU GnuTLS exposure of sensitive information vulnerabilities. Vulnerability Details CVEID:CVE-2023-5981 DESCRIPTION: GNU GnuTLS could allow a remote attacker to obtain sensitive information, caused by a timing sidechannel issue during RSA-PSK key exchange. B...

DEBIAN-CVE-2024-8445

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying userPassword using malformed input...

CVE-2024-8445

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying userPassword using malformed input...

UBUNTU-CVE-2024-8445

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying userPassword using malformed input...

CVE-2024-8445 389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying userPassword using malformed input...

CVE-2024-8445

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying userPassword using malformed input...

CVE-2024-8445 389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying userPassword using malformed input...

CVE-2024-8445 389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying userPassword using malformed input...

CVE-2024-8445

389-ds-base LDAP server has a denial of service risk where an authenticated user could crash the server while modifying userPassword with malformed input. This is an incomplete fix for CVE-2024-2199 (CVE-2024-8445) per multiple advisories (Red Hat, Debian LTS, Debian CVE tracker, AWS ALAS). Conne...

CVE-2024-8445

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying "userPassword" using malformed input...

CVE-2024-8445

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying userPassword using malformed input. Mitigation Mitigation for this issue is either not available or the currently available...

CVE-2024-8445: Improper Input Validation

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying userPassword using malformed input...