CLSA-2023-1688677755 Fix CVE(s): CVE-2023-2828

SECURITY UPDATE: cache size limit exceeding may cause Denial of Service - debian/patches/CVE-2023-2828.patch: when reaching a limit, free as much space as new header requires. - CVE-2023-2828...

ROS-20230420-01

Vulnerability in the modproxy module of Apache HTTP Server is related to flaws in header handling Transfer-Encoding. Exploitation of the vulnerability could allow an attacker acting remotely to send a hidden HTTP request HTTP Request Smuggling attack. hidden HTTP request HTTP Request Smuggling...

The vulnerability of the Jenkins website builder, update-center2, related to errors in handling HTTP headers, allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the Jenkins website builder, Jenkins update-center2, is related to errors in handling HTTP headers. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

PT-2023-21924 · Panasonic · Panasonic Aiseg2

Name of the Vulnerable Software and Affected Versions: Panasonic AiSEG2 versions 2.00J through 2.93A Description: The issue allows adjacent attackers to bypass authentication due to mishandling of X-Forwarded-For headers. This can be exploited by attackers to gain unauthorized access...

SUSE CVE-2010-3541

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...

SUSE CVE-2011-3000

Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not properly handle HTTP responses that contain multiple Location, Content-Length, or Content-Disposition headers, which makes it easier for remote attackers to conduct HTTP response splitting...

SUSE CVE-2019-19886

Trustwave ModSecurity 3.0.0 through 3.0.3 allows an attacker to send crafted requests that may, when sent quickly in large volumes, lead to the server becoming slow or unresponsive Denial of Service because of a flaw in Transaction::addRequestHeader in transaction.cc...

The vulnerability of the mod_proxy module in the Apache HTTP Server allows attackers to perform attacks that involve splitting HTTP responses.

The vulnerability of the modproxy module in the Apache HTTP Server is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to perform attacks that involve splitting HTTP responses...

CLSA-2022-1669390018 grub2: Fix of 7 CVEs

CVE-2021-3981: Fix default privileges of grub.cfg file - CVE-2022-28736: Fix use-after-free bug when grubcmdchainloader is executed more than once before a boot attempt is performed. - CVE-2021-3695: Drop greyscale support to fix heap out-of-bounds write - CVE-2021-3696: Fix out of range...

PT-2022-25555 · Solwin Infotech · Solwin Infotech User Activity Log Plugin

Name of the Vulnerable Software and Affected Versions: Solwin Infotech User Activity Log Plugin affected versions not specified Description: A vulnerability has been found in the Solwin Infotech User Activity Log Plugin, affecting the HTTP Header Handler component. The manipulation of the...

USN-5664-1 openjpeg vulnerabilities

It was discovered that OpenJPEG did not properly handle PNM headers, resulting in a null pointer dereference. A remote attacker could possibly use this issue to cause a denial of service DoS. CVE-2016-7445 It was discovered that OpenJPEG incorrectly handled certain image files resulting in divisi...

PT-2022-6180 · Node.Js +8 · Node +8

Name of the Vulnerable Software and Affected Versions: Node versions 18.7.0 Description: The issue is related to the llhttp parser in the http module, which does not correctly handle header fields that are not terminated with CLRF, potentially resulting in HTTP Request Smuggling. There is also a...

The vulnerability of the WSGI server for Python Waitress, related to HTTP request processing flaws, allows attackers to access confidential data and compromise its integrity.

The vulnerability of the WSGI server for Python Waitress relates to the improper handling of special header characters in the Transfer-Encoding header. Exploiting this vulnerability allows an attacker to remotely access confidential data and compromise its integrity through a specially crafted...

USN-5608-1 dpdk vulnerability

It was discovered that DPDK incorrectly handled certain Vhost headers. A remote attacker could possibly use this issue to cause a denial of service...

The vulnerability of the dialog window, the call-response OPC-server WorkstationST, allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the dialog window, the call-response OPC-server WorkstationST, is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

AZL-45276 CVE-2022-37434 affecting package gpsbabel 1.8.0-4

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call...

USN-5551-1 mod-wsgi vulnerability

It was discovered that mod-wsgi did not correctly remove the X-Client-IP header when processing requests from untrusted proxies. A remote attacker could use this issue to pass the header to WSGI applications, contrary to expectations...

The vulnerabilities of the microprogrammed software of industrial switches SCALANCE X302-7, SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X310, SCALANCE X320-1, SCALANCE X408-2, SCALANCE XR324-4M, SCALANCE XR324-12M, and SIPLUS NET SCALANCE X308-2 are related to errors in handling HTTP headers. These vulnerabilities allow attackers to trigger service interruptions.

The vulnerability of the microprogrammed software of industrial switches SCALANCE X302-7, SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X310, SCALANCE X320-1, SCALANCE X408-2, SCALANCE XR324-4M, and SCALANCE XR324-12M, as...

PT-2022-14203 · WordPress · Awin Data Feed

Name of the Vulnerable Software and Affected Versions: Awin Data Feed WordPress plugin versions prior to 1.8 Description: The issue allows unauthenticated users to perform Stored Cross-Site Scripting attacks against a logged-in admin viewing the plugin's settings. This is due to the plugin not...

CLSA-2022-1656430949 Fix CVE(s): CVE-2022-28615, CVE-2022-26377, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813

SECURITY UPDATE: modsed may make excessively large memory allocations and trigger an abort - debian/patches/CVE-2022-30522.patch: limit modsed memory usage - CVE-2022-30522 SECURITY UPDATE: HTTP request smuggling in modproxyajp - debian/patches/CVE-2022-26377.patch: parse request headers in the w...