Redis Buffer Overflow Code Execution

The vulnerability of the Redis database management system is related to buffer overflow in the queue. Exploiting this vulnerability allows an attacker to execute arbitrary code using the X AUTOCLAIM command...

Security Bulletin: IBM Security Verify Information Queue uses an Oracle JDBC jar with multiple vulnerabilities (CVE-2019-2444, CVE-2019-2619, CVE-2017-10321, CVE-2017-10202)

Summary The connect image in IBM Security Verify Information Queue ISIQ v10.0.2 uses an older version of the Oracle JDBC jar file that has multiple vulnerabilities. ISIQ v10.0.3 upgraded its connect image to include a newer Oracle JDBC jar that remediates the vulnerabilities. CVE-2019-2444,...

Security Bulletin: IBM Security Verify Information Queue uses a Wire Schema jar with multiple vulnerabilities (CVE-2020-27853, CVE-2021-41093)

Summary The connect image in IBM Security Verify Information Queue ISIQ v10.0.2 uses an older version of the Wire Schema jar file that is vulnerable to remote attackers. ISIQ v10.0.3 upgraded its connect image to include a newer Wire Schema jar that remediates the vulnerabilities. CVE-2020-27853,...

Security Bulletin: IBM Security Verify Information Queue uses a Google gRPC framework with multiple vulnerabilities (CVE-2017-7860, CVE-2017-7861, CVE-2017-9431)

Summary The connect image in IBM Security Verify Information Queue ISIQ v10.0.2 uses an older version of the Google RPC gRPC framework that is vulnerable to denial of service and buffer overflow attacks. ISIQ v10.0.3 upgraded its connect image to include a newer gRPC level that remediates the...

Security Bulletin: Multiple vulnerabilities in IBM Security Verify Information Queue connect image (CVE-2020-9493, CVE-2022-23307)

Summary The connect image in IBM Security Verify Information Queue ISIQ v10.0.2 uses a Confluent-provided Apache Log4j library. The library includes a log-viewing component known as Chainsaw that has two deserialization flaws. ISIQ v10.0.3 upgraded its connect image to specify a newer Apache Log4...

Security Bulletin: OpenSSL vulnerabilities in the IBM Security Verify Information Queue web server (CVE-2021-3711, CVE-2021-3712)

Summary The web server in IBM Security Verify Information Queue ISIQ v10.0.2 uses an older Node.js version with two known OpenSSL vulnerabilities. ISIQ v10.0.3 upgraded to a Node.js version that includes a newer OpenSSL to remediate the vulnerabilities. CVE-2021-3711, CVE-2021-3712 Vulnerability...

CVE-2022-22209

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause a Denial of Service DoS. On all Junos platforms, the Kernel Routing Table KRT queue can get stuck due to a memory leak triggered ...

CVE-2022-35283

IBM Security Verify Information Queue 10.0.2 could allow an authenticated user to cause a denial of service with a specially crafted HTTP request...

CVE-2022-35283

IBM Security Verify Information Queue 10.0.2 could allow an authenticated user to cause a denial of service with a specially crafted HTTP request...

CVE-2022-35283

Summary: CVE-2022-35283 affects IBM Security Verify Information Queue (ISIQ) version 10.0.2. An authenticated user can trigger a denial of service via a specially crafted HTTP request. The issue is addressed in ISIQ 10.0.3, which implements stricter URL validation to prevent this DoS. CVSS base s...

IBM Security Verify Information Queue security vulnerability

IBM Security Verify Information Queue is an integration product from IBM USA. utilizes Kafka technology and a publish/subscribe model to integrate data between IBM Security products. A security vulnerability exists in IBM Security Verify Information Queue 10.0.2, which stems from the fact that it...

PT-2022-22685

Name of the Vulnerable Software and Affected Versions IBM Security Verify Information Queue version 10.0.2 Description The issue allows an authenticated user to cause a denial of service with a specially crafted HTTP request. Recommendations For IBM Security Verify Information Queue version 10.0....

CVE-2022-35283: Undefined Security Weakness

IBM Security Verify Information Queue 10.0.2 could allow an authenticated user to cause a denial of service with a specially crafted HTTP request...

CVE-2022-22209

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause a Denial of Service DoS. On all Junos platforms, the Kernel Routing Table KRT queue can get stuck due to a memory leak triggered ...

saltext-azurerm (1.0.0) potentially affected by CVE-2022-30187 via azure-storage-queue (1.1.0)

azure-storage-queue PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-queue and may be impacted: - saltext-azurerm 1.0.0 Source cves: CVE-2022-30187 Source advisory: OSV:GHSA-64X4-9HC6-R2H6...

appdaemon (>=4.0.4, <=4.0.5), aviatrix-discovery (>=0.2.100, <=0.2.148) +18 more potentially affected by CVE-2022-30187 via azure-storage-queue (1.4.0)

azure-storage-queue PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-queue and may be impacted: - appdaemon =4.0.4, =0.2.100, =0.2.123, =3.0.0, =1.0.86, =1.0.0, =0.0.2, =0.0.1, =0.15.8, =0.2.10, =1.12.1, =2.4.1 and more...

azure-kusto-ingest (>=0.0.38, <=0.0.45), c7n-azure (>=0.7.0, <=0.7.9) +2 more potentially affected by CVE-2022-30187 via azure-storage-queue (2.1.0)

azure-storage-queue PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-queue and may be impacted: - azure-kusto-ingest =0.0.38, =0.7.0, =0.0.1, =0.0.4 - npyetl 0.0.5 Source cves: CVE-2022-30187 Source advisory:...

azureml-automl-dnn-nlp (>=1.37.0, <=1.42.0.post1), azureml-automl-dnn-vision (>=1.37.0, <=1.42.0) +10 more potentially affected by CVE-2022-30187 via azure-storage-queue (>=12.1.2, <=12.3.0)

azure-storage-queue PYPI version =12.1.2, =1.37.0, =1.37.0, =1.37.0, =1.37.0, =1.37.0, =0.0.1, =0.0.1, =0.7.10, =0.1.1, =0.1.0, =2.0.0, =4.4.1 - vfxt 0.5.4.4 Source cves: CVE-2022-30187 Source advisory: GHSA-64X4-9HC6-R2H6...

baybars (>=0.0.1, <=0.0.5) potentially affected by CVE-2022-30187 via azure-storage-queue (0.37.0)

azure-storage-queue PYPI version 0.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on azure-storage-queue and may be impacted: - baybars =0.0.1, =0.0.5 Source cves: CVE-2022-30187 Source advisory: OSV:GHSA-64X4-9HC6-R2H6...

azureml-automl-dnn-nlp (>=1.37.0, <=1.42.0.post1), azureml-automl-dnn-vision (>=1.37.0, <=1.42.0) +10 more potentially affected by CVE-2022-30187 via azure-storage-queue (>=12.1.2, <=12.3.0)

azure-storage-queue PYPI version =12.1.2, =1.37.0, =1.37.0, =1.37.0, =1.37.0, =1.37.0, =0.0.1, =0.0.1, =0.7.10, =0.1.1, =0.1.0, =2.0.0, =4.4.1 - vfxt 0.5.4.4 Source cves: CVE-2022-30187 Source advisory: OSV:GHSA-64X4-9HC6-R2H6...