Denial Of Service (DoS)

🗓️ 16 Feb 2023 08:55:19Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 118 Views

werkzeug vulnerability to denial of service attacks by crafted multipart dat

Reporter	Title	Published	Views	Family All 143
IBM Security Bulletins	Security Bulletin: Wekzeug is vulnerable to CVE-2023-25577 and CVE-2023-23934 used in IBM Maximo Application Suite - Monitor Component	24 Jul 202317:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities	27 Sep 202313:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management	28 Feb 202421:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in werkzeug may affect IBM Spectrum Sentinel Anomaly Scan Engine (CVE-2023-25577, CVE-2023-23934)	28 Jul 202314:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Werkzeug affects IBM Cloud Pak for Data System 1.0(CPDS 1.0)	3 Apr 202313:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Uncontrolled Resource Consumption and Improper Input Validation in Werkzeug (CVE-2023-46136, CVE-2023-25577, CVE-2023-23934)	1 Jul 202518:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Pallets Werkzeug security bypass and denialof service vulnerabilities( CVE-2023-23934, CVE-2023-25577)	6 Jul 202317:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulerabilities in TensorFlow	6 Jul 202317:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Advisor With Watson App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	30 May 202318:55	–	ibm

Vulners

Node

python-werkzeug python-werkzeugMatch0.14.1+dfsg1-4+deb10u1debian

AND

debian debian_linuxMatch10

google bionicMatch0.14.1+dfsg1-1ubuntu0.1debian

AND

debian debian_linux

palletsprojects werkzeugRange2.0.0rc1–2.2.2python

palletsprojects werkzeugRange0.8–1.0.1python

python-werkzeug python-werkzeugMatch0.12.2_5.el7sat

python-werkzeug python-werkzeugMatch2.0.1_3.el9ost

python-werkzeug python-werkzeugMatch0.14.1_10.el8ost.1

python-werkzeug python-werkzeugMatch0.14.1_5.el8ost

python-werkzeug python-werkzeugMatch0.9.1_1.el7sat

python-werkzeug python-werkzeugMatch0.14.1_3.el7ost

python-werkzeug python-werkzeugMatch0.9.1_1.el7

python-werkzeug python-werkzeugMatch0.9.1_2.el7

python-werkzeug python-werkzeugMatch0.9.1_1.el7ui

python-werkzeug python-werkzeugMatch0.16.0_1.el8ost

python-werkzeug python-werkzeugMatch2.0.3_1.el8

python-werkzeug python-werkzeugMatch2.0.3_3.el9.1

python-werkzeug python-werkzeugMatch2.0.3_3.el8cp

python-werkzeug python-werkzeugMatch2.0.3_3.el9

Source	Link
github	www.github.com/pallets/werkzeug/releases/tag/2.2.3
github	www.github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1
github	www.github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323
security	www.security.netapp.com/advisory/ntap-20230818-0003/
debian	www.debian.org/security/2023/dsa-5470

18 Aug 2023 17:14Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

EPSS0.00366

SSVC