PT-2022-21213 · Ampere · Ampere Altra Max +1

Name of the Vulnerable Software and Affected Versions: Ampere Altra and AltraMax devices before SRP 1.09 Description: The Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component. Recommendations: For Ampere Altra and AltraMax devices before SRP 1.0...

CVE-2022-32295: Undefined Security Weakness

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

GSD-2022-1003615 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commi...

GSD-2022-1003401 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003109 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002757 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-31372

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the spi-fsl-qspi component in the Linux Kernel, where the return value after calling the platform get resource byname function is not properly checked. This could...

PT-2022-31878

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns the spi-fsl-qspi component in the Linux Kernel, where the return value after calling the platform get resource byname function is not properly checked. This could...

PT-2022-31020

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to the spi-fsl-qspi component in the Linux Kernel, where the return value after calling the platform get resource byname function is not properly checked. This could...

PT-2022-31664

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue concerns the spi-fsl-qspi component in the Linux Kernel, where the return value after calling the platform get resource byname function is not properly checked. This could potential...

org.wildfly:wildfly-client-all (9.0.0.alpha1), org.wildfly:wildfly-clustering-ejb-spi (>=8.1.0.cr1, <=9.0.0.alpha1) +2 more potentially affected by CVE-2020-14297 via org.jboss:jboss-ejb-client (2.0.1.final)

org.jboss:jboss-ejb-client MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-client-all 9.0.0.alpha1 - org.wildfly:wildfly-clustering-ejb-spi =8.1.0.cr1,...

dk.grinn.keycloak:keycloak-migrate-resource (0.0.5), dk.grinn.keycloak:keycloak-migrate-spi (>=0.0.4, <=0.0.5) +4 more potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (5.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - dk.grinn.keycloak:keycloak-migrate-resource 0.0.5 - dk.grinn.keycloak:keycloak-migrate-spi =0.0.4...

dk.grinn.keycloak:keycloak-migrate-resource (>=2.0.0, <=2.0.3), dk.grinn.keycloak:keycloak-migrate-spi (>=2.0.0, <=2.0.3) +3 more potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (7.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - dk.grinn.keycloak:keycloak-migrate-resource =2.0.0, =2.0.0, =2.0.3 -...

com.nimbusds:oauth2-oidc-sdk (>=3.0.2, <=3.2), com.nimbusds:oidc-claims-source-ldap (>=1.2.4, <=1.2.5) +3 more potentially affected by CVE-2017-12973 via com.nimbusds:nimbus-jose-jwt (2.25)

com.nimbusds:nimbus-jose-jwt MAVEN version 2.25 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.nimbusds:oauth2-oidc-sdk =3.0.2, =1.2.4, =1.2.4, =1.4-release, =1.4-release, =1.5.4-release Source...

com.nimbusds:common (>=1.73, <=1.74), com.nimbusds:oauth2-oidc-sdk (2.11) +2 more potentially affected by CVE-2017-12973 via com.nimbusds:nimbus-jose-jwt (2.19)

com.nimbusds:nimbus-jose-jwt MAVEN version 2.19 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.nimbusds:common =1.73, =1.74 - com.nimbusds:oauth2-oidc-sdk 2.11 - com.nimbusds:oidc-userinfo-ldap...

com.nimbusds:oauth2-oidc-sdk (3.0.1), com.nimbusds:oidc-claims-source-ldap (1.2.3) +1 more potentially affected by CVE-2017-12973 via com.nimbusds:nimbus-jose-jwt (2.24)

com.nimbusds:nimbus-jose-jwt MAVEN version 2.24 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.nimbusds:oauth2-oidc-sdk 3.0.1 - com.nimbusds:oidc-claims-source-ldap 1.2.3 -...

com.microsoft.aad:adal4j (0.0.1), com.nimbusds:oauth2-oidc-sdk (>=2.14.2, <=3.0) +7 more potentially affected by CVE-2017-12973 via com.nimbusds:nimbus-jose-jwt (2.22.1)

com.nimbusds:nimbus-jose-jwt MAVEN version 2.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.microsoft.aad:adal4j 0.0.1 - com.nimbusds:oauth2-oidc-sdk =2.14.2, =1.2, =1.2, =1.24.0, =1.1.1,...

com.nimbusds:oauth2-oidc-sdk (2.9), com.nimbusds:oidc-userinfo-ldap (1.1) +1 more potentially affected by CVE-2017-12973 via com.nimbusds:nimbus-jose-jwt (2.18.1)

com.nimbusds:nimbus-jose-jwt MAVEN version 2.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.nimbusds:oauth2-oidc-sdk 2.9 - com.nimbusds:oidc-userinfo-ldap 1.1 - com.nimbusds:oidc-userinfo-sp...

com.nimbusds:oauth2-oidc-sdk (>=2.1, <=2.8), com.nimbusds:oidc-userinfo-ldap (1.0) +1 more potentially affected by CVE-2017-12973 via com.nimbusds:nimbus-jose-jwt (2.16)

com.nimbusds:nimbus-jose-jwt MAVEN version 2.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.nimbusds:oauth2-oidc-sdk =2.1, =2.8 - com.nimbusds:oidc-userinfo-ldap 1.0 -...

com.nimbusds:oauth2-oidc-sdk (>=2.1, <=2.8), com.nimbusds:oidc-userinfo-ldap (1.0) +1 more potentially affected by CVE-2017-12974 via com.nimbusds:nimbus-jose-jwt (2.16)

com.nimbusds:nimbus-jose-jwt MAVEN version 2.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.nimbusds:oauth2-oidc-sdk =2.1, =2.8 - com.nimbusds:oidc-userinfo-ldap 1.0 -...