Lucene search
WolfiWOLFI:CVE-2023-49290HistoryJul 02, 2024 - 3:09 a.m.
CVE-2023-49290 vulnerabilities
2024-07-0203:09:22
packages.wolfi.dev
7
cve-2023-49290
vulnerabilities
packages
istio-operator
istio-cni
falco
falcoctl
kubescape
gitsign
istio-pilot-agent
istio-pilot-discovery
kyverno
tekton-chains
vexctl
unix
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
5.5 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
Vulnerabilities for packages: istio-pilot-discovery, gitsign, falco, istio-cni, falcoctl, istio-operator, vexctl, istio-pilot-agent, kyverno, tekton-chains, kubescape
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Wolfi | unknown | x86_64 | falco | <= 0.37.1-r0 | falco-0.37.1-r0.apk |
| Wolfi | unknown | aarch64 | falco | <= 0.37.1-r0 | falco-0.37.1-r0.apk |
| Wolfi | unknown | x86_64 | falcoctl | <= 0.7.1-r1 | falcoctl-0.7.1-r1.apk |
| Wolfi | unknown | aarch64 | falcoctl | <= 0.7.1-r1 | falcoctl-0.7.1-r1.apk |
| Wolfi | unknown | x86_64 | gitsign | <= 0.8.1-r0 | gitsign-0.8.1-r0.apk |
| Wolfi | unknown | aarch64 | gitsign | <= 0.8.1-r0 | gitsign-0.8.1-r0.apk |
| Wolfi | unknown | x86_64 | istio-cni | <= 1.19.6-r1 | istio-cni-1.19.6-r1.apk |
| Wolfi | unknown | aarch64 | istio-cni | <= 1.19.6-r1 | istio-cni-1.19.6-r1.apk |
| Wolfi | unknown | x86_64 | istio-cni | <= 1.20.2-r1 | istio-cni-1.20.2-r1.apk |
| Wolfi | unknown | aarch64 | istio-cni | <= 1.20.2-r1 | istio-cni-1.20.2-r1.apk |
Related
osv
osv
lestrrat-go/jwx's malicious parameters in JWE can cause a DOS
2023-12-05 23:29:26
Denial of service due to malicious parameters in github.com/lestrrat-go/jwx
2023-12-11 15:08:59
CVE-2023-49290
2023-12-05 00:15:09
veracode
veracode
Denial Of Service (DoS)
2023-12-06 16:45:27
prion
prion
Design/Logic Flaw
2023-12-05 00:15:00
cgr
cgr
CVE-2023-49290 vulnerabilities
2024-05-19 03:07:16
github
github
lestrrat-go/jwx's malicious parameters in JWE can cause a DOS
2023-12-05 23:29:26
cve
cve
CVE-2023-49290
2023-12-05 00:15:09
nvd
nvd
CVE-2023-49290
2023-12-05 00:15:09
cvelist
cvelist
redhatcve
redhatcve
CVE-2023-49290
2023-12-05 08:12:37
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
5.5 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
Related for WOLFI:CVE-2023-49290