org.elasticsearch:elasticsearch-analysis-icu (0.17.5), org.elasticsearch:elasticsearch-cloud-aws (0.17.5) +11 more potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (0.17.5)

org.elasticsearch:elasticsearch MAVEN version 0.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.5 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.17.8), org.elasticsearch:elasticsearch-cloud-aws (0.17.8) +11 more potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (0.17.8)

org.elasticsearch:elasticsearch MAVEN version 0.17.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.8 - org.elasticsearch:elasticsearch-cloud-aws...

ayaka-model (0.2.0), baked (1.0.0) +15 more potentially affected by unknown CVE via zerovec-derive (>=0.6.0, <=0.8.0)

zerovec-derive CARGO version =0.6.0, =0.6.0, =1.0.0-beta1 - icuproviderblob 1.0.0-beta1 - icusegmenter 1.0.0-alpha1 - icusegmenterlstm 0.1.0 and more Source cves: unknown CVE Source advisory: GHSA-74R5-G7VC-J2V2...

ayaka-model (0.2.0), baked (1.0.0) +25 more potentially affected by unknown CVE via zerovec (>=0.2.3, <=0.8.1)

zerovec CARGO version =0.2.3, =0.3.0, =0.6.0, =0.5.0, =1.0.0-beta1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XRV3-JMCP-374J...

ayaka-model (0.2.0), baked (1.0.0) +25 more potentially affected by unknown CVE via zerovec (>=0.2.3, <=0.8.1)

zerovec CARGO version =0.2.3, =0.3.0, =0.6.0, =0.5.0, =1.0.0-beta1 and more Source cves: unknown CVE Source advisory: GHSA-XRV3-JMCP-374J...

ayaka-model (0.2.0), baked (1.0.0) +25 more potentially affected by unknown CVE via zerovec (>=0.2.3, <=0.8.1)

zerovec CARGO version =0.2.3, =0.3.0, =0.6.0, =0.5.0, =1.0.0-beta1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0347...

OPENSUSE-SU-2024:10859-1 icu-69.1-2.3 on GA media

These are all security issues fixed in the icu-69.1-2.3 package on the GA media of openSUSE Tumbleweed...

CVE-2024-32752

The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated communications with ICU, which may allow an attacker to gain unauthorized access...

CVE-2024-32752

The Software House iStar Pro Door Controller and ICU tool are vulnerable to a machine-in-the-middle attack due to missing authentication for critical functions (CWE-306). An attacker can intercept communication between the ICU tool and the door controller to inject commands that modify configurat...

Johnson Controls Software House iStar Door Controller (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS 4 8.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Johnson Controls Inc. Equipment : Software House iStar Pro Door Controller, ICU Vulnerability : Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this...

CVE-2024-32752: Missing Authentication for Critical Function

The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated communications with ICU, which may allow an attacker to gain unauthorized access...

RHEL 5 : icu (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ICU: missing boundary checks in layout engine OpenJDK 2D, 8132042 CVE-2015-4844 - icu: Stack based buffer...

RHEL 6 : icu (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ICU: missing boundary checks in layout engine OpenJDK 2D, 8132042 CVE-2015-4844 - icu: Double free in...

RHEL 7 : icu (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ICU: missing boundary checks in layout engine OpenJDK 2D, 8132042 CVE-2015-4844 - icu: Double free in...

RHEL 5 : icu (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - icu: Stack based buffer overflow in locid.cpp CVE-2016-7415 - The ulocacceptLanguageFromHTTP function in...

RHEL 7 : icu (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - icu: Double free in i18n/zonemeta.cpp CVE-2017-14952 - The ulocacceptLanguageFromHTTP function in...

RHEL 6 : icu (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - icu: Double free in i18n/zonemeta.cpp CVE-2017-14952 - The ulocacceptLanguageFromHTTP function in...

RHEL 7 : chromium-browser (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - chromium-browser: pointer disclosure in sqlite CVE-2017-7000 - numbers.c in libxslt before 1.1.29, as use...

RHEL 6 : chromium-browser (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - chromium-browser: Heap buffer overflow in clipboard CVE-2020-16025 - chromium-browser: Out of bounds writ...

icu:ubidi_fuzzer: Heap-buffer-overflow in ubidi_writeReordered_76

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=5134844093857792 Project: icu Fuzzing Engine: afl Fuzz Target: ubidifuzzer Job Type: aflasanicu Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x5020000000cf Crash State:...