[SECURITY] Fedora 34 Update: protobuf-3.14.0-7.fc34

Protocol Buffers are a way of encoding structured data in an efficient yet extensible format. Google uses Protocol Buffers for almost all of its internal RPC protocols and file formats. Protocol buffers are a flexible, efficient, automated mechanism for serializing structured data...

CVE-2022-24336

In JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via an XML-RPC request to the TeamCity server...

CVE-2022-24336

In JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via an XML-RPC request to the TeamCity server...

CVE-2022-24335

JetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use TOCTOU race-condition attack in agent registration via XML-RPC...

CVE-2022-24335

JetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use TOCTOU race-condition attack in agent registration via XML-RPC...

CVE-2022-24333

In JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible...

CVE-2022-24336

In JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via an XML-RPC request to the TeamCity server...

Race condition

JetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use TOCTOU race-condition attack in agent registration via XML-RPC...

Server side request forgery (ssrf)

In JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible...

Cross site request forgery (csrf)

In JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via an XML-RPC request to the TeamCity server...

CVE-2022-24336

JetBrains TeamCity before 2021.2.1 is affected. An unauthenticated attacker can cancel running builds by sending an XML-RPC request to the TeamCity server. Affected versions are those prior to 2021.2.1. Remediation: upgrade to 2021.2.1 or later; as a temporary workaround, restrict access to the X...

CVE-2022-24335

CVE-2022-24335 describes a TOCTOU race-condition in JetBrains TeamCity’s agent registration via XML-RPC for builds prior to 2021.2. The issue could allow an attacker to elevate privileges and impact integrity/availability; CVSSv3.1 scores show a high impact (8.1) with network access and no privil...

CVE-2022-24335

JetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use TOCTOU race-condition attack in agent registration via XML-RPC...

CVE-2022-24333

CVE-2022-24333 affects JetBrains TeamCity before 2021.2, enabling blind SSRF via an XML-RPC call. The underlying issue is an XML-RPC request handling that fails to validate identities, allowing an attacker over the network to trigger SSRF without user interaction. Impact is reported as partial co...

CVE-2022-24333

In JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible...

JetBrains TeamCity 代码问题漏洞

JetBrains TeamCity is a distributed build management and continuous integration tool from JetBrains Czech Republic.JetBrains TeamCity is vulnerable to an access control error that stems from the product's failure to validate data in XML-RPC requests and the identity of the user. An attacker could...

The vulnerability of the NFS ONCRPC XDR driver for Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the NFS ONCRPC XDR driver for Windows operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

CLSA-2022-1645700971 Fix of CVE: CVE-2022-23218, CVE-2022-23219

CVE-2022-23218: stack buffer overflow in sunrpc module results in DoS - CVE-2022-23219: stack buffer overflow in sunrpc module results in DoS...

A Definitive Guide to the Remote Procedure Call (RPC) Filter

...

(Pwn2Own) Cisco RV340 JSON RPC file-copy Command Injection Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Cisco RV340 routers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...