org.graylog.plugins:graylog-plugin-parent (3.3.0-beta.3), org.graylog.plugins:graylog-plugin-web-parent (3.3.0-beta.3) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (3.3.0-beta.3)

org.graylog2:graylog2-server MAVEN version 3.3.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.3.0-beta.3 -...

org.graylog.plugins:graylog-plugin-parent (2.2.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.1) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.2.1)

org.graylog2:graylog2-server MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.1 - org.graylog.plugins:graylog-plugin-pipeline-processor...

org.graylog.plugins:graylog-plugin-parent (2.5.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.5.1) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.5.1)

org.graylog2:graylog2-server MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.5.1 - org.graylog.plugins:graylog-plugin-pipeline-processor...

org.graylog.plugins:graylog-plugin-parent (4.0.10), org.graylog.plugins:graylog-plugin-web-parent (4.0.10) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.0.10)

org.graylog2:graylog2-server MAVEN version 4.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.0.10 - org.graylog.plugins:graylog-plugin-web-parent 4.0.1...

org.graylog.plugins:graylog-plugin-parent (3.3.10), org.graylog.plugins:graylog-plugin-web-parent (3.3.10) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (3.3.10)

org.graylog2:graylog2-server MAVEN version 3.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.3.10 - org.graylog.plugins:graylog-plugin-web-parent 3.3.1...

org.graylog.plugins:graylog-plugin-parent (2.3.0-alpha.3), org.graylog.plugins:graylog-plugin-pipeline-processor (2.3.0-alpha.3) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.3.0-alpha.3)

org.graylog2:graylog2-server MAVEN version 2.3.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.3.0-alpha.3 -...

org.graylog.plugins:graylog-plugin-parent (4.3.7), org.graylog.plugins:graylog-plugin-web-parent (4.3.7) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.3.7)

org.graylog2:graylog2-server MAVEN version 4.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.7 - org.graylog.plugins:graylog-plugin-web-parent 4.3.7...

org.graylog.plugins:graylog-plugin-parent (2.2.0-alpha.3), org.graylog.plugins:graylog-plugin-web-parent (2.2.0-alpha.3) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.2.0-alpha.3)

org.graylog2:graylog2-server MAVEN version 2.2.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-alpha.3 -...

org.graylog.plugins:graylog-plugin-parent (4.1.13), org.graylog.plugins:graylog-plugin-web-parent (4.1.13) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.1.13)

org.graylog2:graylog2-server MAVEN version 4.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.1.13 - org.graylog.plugins:graylog-plugin-web-parent 4.1.1...

org.graylog.plugins:graylog-plugin-parent (2.2.0-beta.6), org.graylog.plugins:graylog-plugin-pipeline-processor (2.2.0-beta.6) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.2.0-beta.6)

org.graylog2:graylog2-server MAVEN version 2.2.0-beta.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-beta.6 -...

org.graylog.telemetry:graylog-telemetry-plugin (1.0.1) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (1.0.0)

org.graylog2:graylog2-server MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.telemetry:graylog-telemetry-plugin 1.0.1 Source cves: CVE-2023-41045 Source advisory:...

org.graylog.plugins:graylog-plugin-parent (4.3.1), org.graylog.plugins:graylog-plugin-web-parent (4.3.1) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.3.1)

org.graylog2:graylog2-server MAVEN version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.1 - org.graylog.plugins:graylog-plugin-web-parent 4.3.1...

org.graylog.plugins:graylog-plugin-parent (3.2.4), org.graylog.plugins:graylog-plugin-web-parent (3.2.4) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (3.2.4)

org.graylog2:graylog2-server MAVEN version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 3.2.4 - org.graylog.plugins:graylog-plugin-web-parent 3.2.4...

org.graylog.plugins:graylog-plugin-parent (2.5.0-beta.1), org.graylog.plugins:graylog-plugin-pipeline-processor (2.5.0-beta.1) +2 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.5.0-beta.1)

org.graylog2:graylog2-server MAVEN version 2.5.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.5.0-beta.1 -...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=2.0.0, <=2.2.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=3.2.0, <=3.2.5) +4 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (3.2.5)

org.graylog2:graylog2-server MAVEN version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =2.0.0, =3.2.0, =2.0.0, =2.0.2, =2.2...

org.graylog.plugins:graylog-plugin-parent (4.3.12), org.graylog.plugins:graylog-plugin-web-parent (4.3.12) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.3.12)

org.graylog2:graylog2-server MAVEN version 4.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.3.12 - org.graylog.plugins:graylog-plugin-web-parent 4.3.1...

org.graylog.plugins:graylog-plugin-parent (4.2.9), org.graylog.plugins:graylog-plugin-web-parent (4.2.9) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (4.2.9)

org.graylog2:graylog2-server MAVEN version 4.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 4.2.9 - org.graylog.plugins:graylog-plugin-web-parent 4.2.9...

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.1), org.graylog.plugins:usage-statistics (2.1.1) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.1.1)

org.graylog2:graylog2-server MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.1 - org.graylog.plugins:usage-statistics 2.1....

org.graylog.telemetry:graylog-telemetry-plugin (>=1.0.0-beta.2, <=1.0.0-beta.3) potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (1.0.0-beta.3)

org.graylog2:graylog2-server MAVEN version 1.0.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.telemetry:graylog-telemetry-plugin =1.0.0-beta.2, =1.0.0-beta.3 Source cves:...

GHSA-G96C-X7RH-99R3 Graylog vulnerable to insecure source port usage for DNS queries

Summary Graylog utilises only one single source port for DNS queries. Details Graylog seems to bind a single socket for outgoing DNS queries. That socket is bound to a random port number which is not changed again. This goes against recommended practice since 2008, when Dan Kaminsky discovered ho...