gov.hhs.cms.bluebutton.fhir:bbonfhir-server-app (>=0.1.0-cbbf-1-additional-config-changes-1, <=0.1.0-54), gov.hhs.cms.bluebutton.fhir:bluebutton-server-app (>=0.1.0-cbbf-40-cleanup-and-refactor-round-2-1, <=1.0.0-7) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (2.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - gov.hhs.cms.bluebutton.fhir:bbonfhir-server-app...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.8.0), ca.uhn.hapi.fhir:hapi-fhir-igpacks (3.8.0) +2 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.8.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.8.0 - ca.uhn.hapi.fhir:hapi-fhir-igpacks...

Uncontrolled Resource Consumption in JPA Server in HAPI FHIR

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are...

org.hspconsortium.reference:hspc-reference-api (>=1.5.0, <=1.8.0), org.hspconsortium.reference:hspc-reference-api-mysql (>=1.5.0, <=1.8.0) +3 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (2.4)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 2.4 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - org.hspconsortium.reference:hspc-reference-api =1.5.0, =1.5.0, =1.5.0, =1.5.0,...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (0.9) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (0.9)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 0.9 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 0.9 Source cves: CVE-2021-32053...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.6) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.6)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 1.6 Source cves: CVE-2021-32053...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.0.0), ca.uhn.hapi.fhir:hapi-fhir-igpacks (4.0.0) +2 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (4.0.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.0.0 - ca.uhn.hapi.fhir:hapi-fhir-igpacks...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.5.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-migrate (3.5.0) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.5.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.5.0 -...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.4), org.hspconsortium.reference:hspc-reference-api (>=0.9, <=1.0) +5 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.4)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 1.4 -...

org.hspconsortium.reference:hspc-reference-api (>=1.9.0, <=1.10.3), org.hspconsortium.reference:hspc-reference-api-mysql (>=1.9.0, <=1.10.3) +3 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.0.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - org.hspconsortium.reference:hspc-reference-api =1.9.0, =1.9.0, =1.9.0, =1.9.0...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.4.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.4.0 Source cves: CVE-2021-32053 Source...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.6.0), ca.uhn.hapi.fhir:hapi-fhir-igpacks (3.6.0) +1 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.6.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.6.0 - ca.uhn.hapi.fhir:hapi-fhir-igpacks...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.5) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 1.5 Source cves: CVE-2021-32053...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.1.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (4.1.0) +16 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (4.1.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.1.0 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.0.0, <=5.3.3), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.0.0, <=5.3.3) +15 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=5.0.0, <=5.3.3)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version =5.0.0, =5.0.0, =5.0.0, =5.3.0, =5.0.0, =5.3.0, =5.1.0, =5.3.0, =5.0.0, =5.2.0, =5.1.0, =5.3.3 - org.opencds.cqf:common 0.4.0 - org.opencds.cqf:cqf-ruler-dstu3 0.4.0 - org.opencds.cqf:cqf-ruler-r4 0.4.0 - org.opencds.cqf:dstu3 0.4.0 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.0.3), ca.uhn.hapi.fhir:hapi-fhir-igpacks (4.0.3) +1 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (4.0.3)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.0.3 - ca.uhn.hapi.fhir:hapi-fhir-igpacks...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.0.0, <=5.3.3), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.0.0, <=5.3.3) +15 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=5.0.0, <=5.3.3)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version =5.0.0, =5.0.0, =5.0.0, =5.3.0, =5.0.0, =5.3.0, =5.1.0, =5.3.0, =5.0.0, =5.2.0, =5.1.0, =5.3.3 - org.opencds.cqf:common 0.4.0 - org.opencds.cqf:cqf-ruler-dstu3 0.4.0 - org.opencds.cqf:cqf-ruler-r4 0.4.0 - org.opencds.cqf:dstu3 0.4.0 -...

Uncontrolled Resource Consumption

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are...

hapi uncontrolled resource consumption DoS

The vulnerability of the @hapi/hapi application software library in Aurora Center is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow attackers to cause service failures...

PT-2021-3185

Name of the Vulnerable Software and Affected Versions @hapi/hapi affected versions not specified Description The issue is related to an uncontrolled resource consumption in the @hapi/hapi library of the Avrora Center application software. Exploitation of this issue may allow an attacker to cause ...