org.eclipse.hudson.plugins:hudson-plugin-parent (>=3.3.1, <=3.3.3), org.eclipse.hudson.stapler:stapler-core (>=3.0.4, <=3.0.6) +10 more potentially affected by CVE-2018-10237 via org.hudsonci.lib.guava:guava (>=14.0.1-h-1, <=14.0.1-h-3)

org.hudsonci.lib.guava:guava MAVEN version =14.0.1-h-1, =3.3.1, =3.0.4, =3.0.4, =3.3.1, =3.3.1, =3.3.1, =3.3.1, =3.3.1, =3.3.1, =3.3.1, =3.3.1, =4.5.0, =4.6.0 Source cves: CVE-2018-10237 Source advisory: OSV:GHSA-MVR2-9PJ6-7W5J...

org.eclipse.hudson.plugins:hudson-plugin-parent (>=3.3.1, <=3.3.3), org.eclipse.hudson.stapler:stapler-core (>=3.0.4, <=3.0.6) +10 more potentially affected by CVE-2018-10237 via org.hudsonci.lib.guava:guava (>=14.0.1-h-1, <=14.0.1-h-3)

org.hudsonci.lib.guava:guava MAVEN version =14.0.1-h-1, =3.3.1, =3.0.4, =3.0.4, =3.3.1, =3.3.1, =3.3.1, =3.3.1, =3.3.1, =3.3.1, =3.3.1, =3.3.1, =4.5.0, =4.6.0 Source cves: CVE-2018-10237 Source advisory: GHSA-MVR2-9PJ6-7W5J...

org.sakaiproject.nakamura:org.sakaiproject.nakamura.core (>=1.4, <=1.5), org.sakaiproject.nakamura:org.sakaiproject.nakamura.derby-driver (>=10.6.2.1-1.4, <=10.6.2.1-1.5) +2 more potentially affected by CVE-2018-10237 via com.googlecode.guava-osgi:guava-osgi (9.0.0)

com.googlecode.guava-osgi:guava-osgi MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.guava-osgi:guava-osgi and may be impacted: - org.sakaiproject.nakamura:org.sakaiproject.nakamura.core =1.4, =10.6.2.1-1.4,...

app.pickmaven:businessdays (>=1.0.0, <=1.0.1), ca.coglinc.javacc:ca.coglinc.javacc.gradle.plugin (2.4.0) +627 more potentially affected by CVE-2018-10237 via com.google.guava:guava-jdk5 (>=17.0-rc1, <=17.0)

com.google.guava:guava-jdk5 MAVEN version =17.0-rc1, =1.0.0, =4.0.2, =1.0, =3.0, =1.1.0, =0.8.0, =0.6.1-96, =0.6.2-100 - com.dipien.releaseshub.gradle.plugin:com.dipien.releaseshub.gradle.plugin.gradle.plugin 4.0.0 - com.dipien:releases-hub-gradle-plugin 4.0.0 - com.directmediatips:dmt-cron 0.1.0...

com.github.praxissoftware.maven.plugins:features-maven-plugin (>=1.0.0, <=1.1.0), com.github.praxissoftware.rest:com.github.praxissoftware.rest.core (>=1.1.0, <=2.0.1) +99 more potentially affected by CVE-2018-10237 via com.googlecode.guava-osgi:guava-osgi (>=11.0.0, <=11.0.1)

com.googlecode.guava-osgi:guava-osgi MAVEN version =11.0.0, =1.0.0, =1.1.0, =1.5, =1.5, =1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2018-10237 Source advisory: OSV:GHSA-MVR2-9PJ6-7W5J...

guava: Unbounded memory allocation in AtomicDoubleArray and CompoundOrdering classes allow remote attackers to cause a denial of service

A vulnerability was found in Guava where the AtomicDoubleArray and CompoundOrdering classes were found to allocate memory based on size fields sent by the client without validation. A crafted message could cause the server to consume all available memory or crash leading to a denial of service...

Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product

Summary DB2 contains several vulnerabilities which can affect the IBM Performance Management product. Some of the information about security vulnerabilities affecting DB2 has been published in security bulletins. Vulnerability Details CVEID: CVE-2017-12973 DESCRIPTION: Connect2id Nimbus JOSE+JWT...

Security Bulletin: Vulnerability in Google Guava affects IBM Cloud Pak System (CVE-2018-10237)

Summary There is a potential denial of service with the Google Guava library that is used in IBM Cloud Pak System. Vulnerability Details CVEID: CVE-2018-10237 DESCRIPTION: Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of...

Security Bulletin: Multiple Vulnerabilities in Watson Openscale (Liberty, Java, node.js)

Summary Multiple Vulnerabilities in Watson Openscale Liberty, Java, node.js Vulnerability Details CVEID: CVE-2018-10237 DESCRIPTION: Google Guava is vulnerable to a denial of service, caused by improper eager allocation checks in the AtomicDoubleArray and CompoundOrdering class. By sending a...

Security Bulletin: Vulnerability in Google Guava affects IBM Cúram Social Program Management (CVE-2018-10237)

Summary IBM Cúram Social Program Management uses the Google Guava library indirectly through Google Guice. In versions of Google Guava library before version 24.1.1, an unbounded memory allocation vulnerability enables remote attackers to conduct denial of service attacks against servers that...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.1.18 logging-elasticsearch5 security update

An update for logging-elasticsearch5-container is now available for Red Hat OpenShift Container Platform 4.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Security Bulletin: Vulnerabilities in Google Guava 11.0 through 24.x before 24.1.1

Summary There are vulnerabilities in Google Guava 11.0 through 24.x before 24.1.1 used by IBM Streams. IBM Streams has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-10237 DESCRIPTION: Google Guava is vulnerable to a denial of service, caused by improper eager allocation...

Security Bulletin: A vulnerability in Google Guava could affect IBM Cloud App Management V2018

Summary There is a vulnerability in Google Guava used by IBM® Cloud App Management V2018. IBM® Cloud App Management has addressed the applicable CVE in a later version. Vulnerability Details CVEID: CVE-2018-10237 DESCRIPTION: Google Guava is vulnerable to a denial of service, caused by improper...

Security Bulletin: Security Vulnerability in IBM WebSphere Application Server Liberty affects IBM Rational License Key Server Administration & Reporting Tool and Agent

Summary A Security Vulnerability in IBM WebSphere Application Server Liberty, used by IBM Rational License Key Server Administration & Reporting Tool and Agent, has been published. IBM Rational License Key Server Administration & Reporting Tool and Agent team has come up with a remediation...

SUSE-RU-2019:1006-1 Security update for SUSE Manager Server 3.2

This update includes the following new features: to the repository metadata fate325676 This update fixes the following issues: apache-commons-lang3: - Run fdupes on javadoc - Specify java target and source level 1.6 to make package compatible with JDK = 1.8 cobbler: - Fixes case where distributio...

Security Bulletin: A vulnerability in IBM WebSphere Application Server affects IBM Spectrum Scale packaged in IBM Elastic Storage Server (CVE-2018-10237)

Summary There is a vulnerability in IBM WebSphere Application Server, used by IBM Spectrum Scale. This vulnerability may allow a remote attacker to cause a denial of service condition. Vulnerability Details CVEID: CVE-2018-10237 DESCRIPTION: Google Guava is vulnerable to a denial of service, caus...

Security Bulletin: Potential denial of service in WebSphere Application Server shipped with IBM Operations Analytics - Log Analysis (CVE-2018-10237)

Summary There is a potential denial of service with the Google Guava library that is used in WebSphere Application Server. Vulnerability Details CVEID: CVE-2018-10237 DESCRIPTION: Google Guava is vulnerable to a denial of service, caused by improper eager allocation checks in the AtomicDoubleArra...

Security Bulletin: Potential denial of service in WebSphere Application Server (CVE-2018-10237)

Summary There is a potential denial of service with the Google Guava library that is used in WebSphere Application Server. Vulnerability Details CVEID: CVE-2018-10237 DESCRIPTION: Google Guava is vulnerable to a denial of service, caused by improper eager allocation checks in the AtomicDoubleArra...

Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty affects IBM Watson Compare and Comply on IBM Cloud Private

Summary There is a potential denial of service with the Google Guava library that is used in WebSphere Application Server Liberty which in turn is used by IBM Watson™ Compare and Comply on IBM Cloud Private. Vulnerability Details CVEID: CVE-2018-10237 DESCRIPTION: Google Guava is vulnerable to a...

Security Bulletin: Potential denial of service in Liberty for Java for IBM Cloud (CVE-2018-10237)

Summary There is a potential denial of service with the Google Guava library that is used in Liberty for Java. Vulnerability Details CVEID: CVE-2018-10237 DESCRIPTION: Google Guava is vulnerable to a denial of service, caused by improper eager allocation checks in the AtomicDoubleArray and...