Security Bulletin: Vulnerabilities found within Apache Storm that is used by IBM Tivoli Network Manager (ITNM) IP Edition

Summary Vulnerabilities found within Apache Storm CVE-2020-25649, CVE-2020-36518, CVE-2021-22569, CVE-2021-38153 that is used by IBM Tivoli Network Manager ITNM IP Edition Vulnerability Details CVEID:CVE-2020-25649 DESCRIPTION: FasterXML Jackson Databind could provide weaker than expected securit...

protobuf-java: potential DoS in the parsing procedure for binary data

A flaw was found in protobuf-java. Google Protocol Buffer protobuf-java allows the interleaving of com.google.protobuf.UnknownFieldSet fields. By persuading a victim to open specially-crafted content, a remote attacker could cause a timeout in the ProtobufFuzzer function, resulting in a denial of...

protobuf-java:ProtobufFuzzer: Timeout in ProtobufFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=6156425441705984 Project: protobuf-java Fuzzing Engine: libFuzzer Fuzz Target: ProtobufFuzzer Job Type: libfuzzerasanprotobuf-java Platform Id: linux Crash Type: Timeout exceeds 60 secs Crash Address: Crash State: ProtobufFuzzer Sanitizer: addres...