org.wildfly.core:wildfly-core-feature-pack-common (18.0.2.final), org.wildfly.core:wildfly-core-galleon-pack (18.0.2.final) +32 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (18.0.2.final)

org.wildfly.core:wildfly-controller MAVEN version 18.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 18.0.2.final -...

org.keycloak:keycloak-saml-wildfly-subsystem (>=16.1.1, <=17.0.1), org.keycloak:keycloak-wildfly-adduser (>=16.1.1, <=17.0.1) +130 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (18.0.4.final)

org.wildfly.core:wildfly-controller MAVEN version 18.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.keycloak:keycloak-saml-wildfly-subsystem =16.1.1, =16.1.1, =16.1.1, =16.1.1,...

org.wildfly.core:wildfly-core-feature-pack-common (18.1.0.beta1), org.wildfly.core:wildfly-core-galleon-pack (18.1.0.beta1) +125 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (18.1.0.beta1)

org.wildfly.core:wildfly-controller MAVEN version 18.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 18.1.0.beta1 -...

org.wildfly.core:wildfly-core-feature-pack-common (19.0.0.beta6), org.wildfly.core:wildfly-core-galleon-pack (19.0.0.beta6) +32 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (19.0.0.beta6)

org.wildfly.core:wildfly-controller MAVEN version 19.0.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 19.0.0.beta6 -...

org.wildfly.core:wildfly-core-feature-pack-common (19.0.0.beta7), org.wildfly.core:wildfly-core-galleon-pack (19.0.0.beta7) +32 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (19.0.0.beta7)

org.wildfly.core:wildfly-controller MAVEN version 19.0.0.beta7 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 19.0.0.beta7 -...

org.wildfly.core:wildfly-core-feature-pack-common (19.0.0.beta15), org.wildfly.core:wildfly-core-galleon-pack (19.0.0.beta15) +143 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (19.0.0.beta15)

org.wildfly.core:wildfly-controller MAVEN version 19.0.0.beta15 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 19.0.0.beta15 -...

org.wildfly.core:wildfly-core-feature-pack-common (19.0.0.beta17), org.wildfly.core:wildfly-core-galleon-pack (19.0.0.beta17) +33 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (19.0.0.beta17)

org.wildfly.core:wildfly-controller MAVEN version 19.0.0.beta17 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 19.0.0.beta17 -...

org.wildfly.core:wildfly-core-feature-pack-common (19.0.0.final), org.wildfly.core:wildfly-core-galleon-pack (19.0.0.final) +133 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (19.0.0.final)

org.wildfly.core:wildfly-controller MAVEN version 19.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 19.0.0.final -...

org.wildfly.core:wildfly-core-feature-pack-common (20.0.0.beta3), org.wildfly.core:wildfly-core-galleon-pack (20.0.0.beta3) +32 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (20.0.0.beta3)

org.wildfly.core:wildfly-controller MAVEN version 20.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 20.0.0.beta3 -...

org.wildfly.core:wildfly-core-feature-pack-common (20.0.0.beta4), org.wildfly.core:wildfly-core-galleon-pack (20.0.0.beta4) +32 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (20.0.0.beta4)

org.wildfly.core:wildfly-controller MAVEN version 20.0.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 20.0.0.beta4 -...

org.wildfly.core:wildfly-core-feature-pack-common (>=22.0.0.beta1, <=22.0.0.beta3), org.wildfly.core:wildfly-core-galleon-pack (>=22.0.0.beta1, <=22.0.0.beta3) +114 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (>=22.0.0.beta1, <=22.0.0.beta3)

org.wildfly.core:wildfly-controller MAVEN version =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1, =22.0.0.beta1,...

openssl: Possible DoS translating ASN.1 object identifiers

A flaw was found in OpenSSL resulting in a possible denial of service while translating ASN.1 object identifiers. Applications that use OBJobj2txt directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may experience long delays when...

kernel: Linux kernel KVM: Denial of Service due to incorrect kvm_arm_init failure handling in finalize_pkvm

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 architectures. This vulnerability arises from a lack of synchronization between the finalizepkvm and kvmarminit initialization calls. A local attacker with low privileges could exploit this by triggering a scenario...

kernel: bpf: Fix wrong reg type conversion in release_reference()

A flaw was found in the eBPF subsystem in the Linux kernel. When a resource is released, the pointer registers related to the resource are incorrectly converted to the wrong type, allowing kernel pointers to be exposed to unprivileged users...

kernel: HID: check empty report_list in hid_validate_values()

A memory corruption flaw was found in the Linux kernel’s human interface device HID subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system...

kernel: ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()

A vulnerability was found in the Linux kernel's ALSA subsystem in the addsecretdacpath function, where improper array handling can lead to out-of-bounds access. This occurs if the return value of the call to sndhdagetconnections returns an error code a negative number, which is stored in the...

kernel: net: fix NULL pointer in skb_segment_list

A flaw was found in the Linux kernel's net subsystem. A NULL pointer dereference can be triggered when a specific sequence of network events occurs due to an improper check, resulting in a denial of service...

kernel: scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove()

A flaw was found in the mpi3mr module in the Linux kernel. The missing release of memory allocated for mpi3mrhbaport will cause a memory leak, potentially impacting system stability and resulting in a denial of service...

kernel: ASoC: fsl_mqs: move of_node_put() to the correct location

In the Linux kernel, the following vulnerability has been resolved: ASoC: fslmqs: move ofnodeput to the correct location ofnodeput should have been done directly after mqspriv-regmap = sysconnodetoregmapgprnp; otherwise it creates a reference leak on the success path. To fix this, ofnodeput is...

kernel: scsi: Revert "scsi: core: Do not increase scsi_device's iorequest_cnt if dispatch failed"

A use-after-free flaw was found in the Linux kernel's SCSI subsystem in the command dispatch error handling. A local user can trigger this issue through specific SCSI device operations that cause dispatch failures, where the code attempts to increment a reference counter on a device structure tha...