OSV-2022-202 Heap-buffer-overflow in ndpi_workflow_process_packet

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45036 Crash type: Heap-buffer-overflow READ 4 Crash state: ndpiworkflowprocesspacket fuzzndpireader.c...

PT-2022-36853

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read crash has been identified, with the crash state involving the ndpi workflow process packet function in the fuzz ndpi reader.c...

Review your security vulnerabilities in GitHub with code scanning alerts

Today, for GitHub repositories, our SAST analysis provides fast, precise security feedback directly inside your pull requests. You instantly know how many vulnerabilities are detected and, until now, you would systematically go to SonarCloud to start investigating. Not anymore. From this point...

PT-2022-36848

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, associated with the handling of IPv6 extension headers. The crash occurs in the ndpi handle ipv6 extension...

Security Bulletin: Multiple security vulnerabilities with IBM FileNet Content Manager component in IBM Business Automation Workflow -CVE-2021-31811, CVE-2021-31812, CVE-2021-23926, CVE-2021-38965

Summary The embedded IBM FileNet Content Manager component, that is shipped with IBM Business Automation Workflow is vulnerable to multiple vulnerabilities. Vulnerability Details CVEID: CVE-2021-38965 DESCRIPTION: IBM FileNet Content Manager 5.5.4, 5.5.6, and 5.5.7 could allow a remote...

The Tripod Foundation of a Database Analytics Solution for Today’s Threat Landscape

In the first and second posts in this series, we explained why traditional approaches are no longer viable to take on today’s threat landscape and showed why internally-generated attacks are so difficult to stop. In this post, we’ll identify the critical elements of a highly effective database...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-8), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (0.1-beta-8) potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-8)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-8 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.2), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.2) potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.2 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-5), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (0.1-beta-5) potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-5)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-5 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.3), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.3) potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.3 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.4) +2 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.4)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4 -...

com.logmein:pipeline-bamboo (>=0.0.1, <=0.0.2), com.openmake:deployhub (>=8.0.12, <=8.0.14) +61 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (>=2.0, <=2.92)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version =2.0, =0.0.1, =8.0.12, =0.8, =1.0, =1.0, =y, =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =1.2.0-beta-1 and more Source cves: CVE-2022-25173 Source advisory: OSV:GHSA-4M7P-55JM-3VWV...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.10), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.10) +2 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.10)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.10 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4.2), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.4.2) potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.4.2)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4.2 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.4.3), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.4.3) potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.4.3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.4.3 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.10-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.10-beta-1) potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.10-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.10-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.10-beta-1 -...

com.openshift.jenkins:openshift-pipeline (>=1.0.14, <=1.0.57), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11) +9 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.11)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.14, =1.3.0, =1.1.0, =1.1,...

org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (>=1.0-alpha-1, <=1.0-alpha-2), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=1.0-alpha-1, <=1.0-alpha-2) +4 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:parent-pom =1.0-alpha-...

com.synopsys.jenkinsci:ownership (>=0.9.0-beta-1, <=0.13.0), org.jenkins-ci.plugins.pipeline-stage-view:parent-pom (1.0) +9 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.synopsys.jenkinsci:ownership =0.9.0-beta-1, =1.0, =1.2.0, =1.2.7 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.14.1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.14.1) +1 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.14.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.14.1 -...