Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-28158 State: PUBLISHED Published: 2024-03-06T17:01:59.995Z Last Updated: 2025-02-13T17:47:23.210Z Vendors: Jenkins Project Products: Jenkins Subversion Partial Release Manager Plugin Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3325 - http://www.openwall.com/lists/oss-security/2024/03/06/3
CVE ID: CVE-2024-28159 State: PUBLISHED Published: 2024-03-06T17:02:00.731Z Last Updated: 2025-02-13T17:47:23.759Z Vendors: Jenkins Project Products: Jenkins Subversion Partial Release Manager Plugin Description: A missing permission check in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers with Item/Read permission to trigger a build. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3325 - http://www.openwall.com/lists/oss-security/2024/03/06/3
CVE ID: CVE-2024-28160 State: PUBLISHED Published: 2024-03-06T17:02:01.368Z Last Updated: 2025-02-13T17:47:24.304Z Vendors: Jenkins Project Products: Jenkins iceScrum Plugin Description: Jenkins iceScrum Plugin 1.1.6 and earlier does not sanitize iceScrum project URLs on build views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3248 - http://www.openwall.com/lists/oss-security/2024/03/06/3
CVE ID: CVE-2024-28161 State: PUBLISHED Published: 2024-03-06T17:02:02.033Z Last Updated: 2025-02-13T17:47:24.992Z Vendors: Jenkins Project Products: Jenkins Delphix Plugin Description: In Jenkins Delphix Plugin 3.0.1, a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections is disabled by default. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3215 - http://www.openwall.com/lists/oss-security/2024/03/06/3
CVE ID: CVE-2024-28162 State: PUBLISHED Published: 2024-03-06T17:02:02.667Z Last Updated: 2025-02-13T17:47:25.492Z Vendors: Jenkins Project Products: Jenkins Delphix Plugin Description: In Jenkins Delphix Plugin 3.0.1 through 3.1.0 (both inclusive) a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections fails to take effect until Jenkins is restarted when switching from disabled validation to enabled validation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3330 - http://www.openwall.com/lists/oss-security/2024/03/06
tps://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3330 - http://www.openwall.com/lists/oss-security/2024/03/06/3
CVE ID: CVE-2024-28163 State: PUBLISHED Published: 2024-03-12T00:45:42.419Z Last Updated: 2024-09-28T22:26:22.511Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP NetWeaver Process Integration (Support Web Pages) Problem Types: CWE-732 Description: Under certain conditions, Support Web Pages of SAP NetWeaver Process Integration (PI) - versions 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/not
cation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3434192 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
CVE ID: CVE-2024-28164 State: PUBLISHED Published: 2024-06-11T02:18:48.019Z Last Updated: 2024-08-02T00:48:49.198Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP_SE Products: SAP NetWeaver AS Java Problem Types: CWE-200 Description: SAP NetWeaver AS Java (CAF - Guided Procedures) allows an unauthenticated user to access non-sensitive information about the server which would otherwise be restricted causing low impact on confidentiality of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3425571 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html
CVE ID: CVE-2024-28165 State: PUBLISHED Published: 2024-05-14T03:51:20.267Z Last Updated: 2024-08-02T00:48:49.373Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: SAP_SE Products: SAP BusinessObjects Business Intelligence Platform Problem Types: CWE-79 Description: SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to manipulate a parameter in the Opendocument URL which could lead to high impact on Confidentiality and Integrity of the application Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3431794 - https://support.sap.com/en/my-support/know
nt: - CVE Program Container: References: - https://me.sap.com/notes/3431794 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html
CVE ID: CVE-2024-28166 State: PUBLISHED Published: 2024-08-13T04:05:24.442Z Last Updated: 2024-12-10T06:22:53.694Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: SAP_SE Products: SAP BusinessObjects Business Intelligence Platform Problem Types: CWE-434 Description: SAP BusinessObjects Business Intelligence Platform allows an authenticated attacker to upload malicious code over the network, that could be executed by the application. On successful exploitation, the attacker can cause a low impact on the Integrity of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3433545 - https://me.sap.com/notes/351565
Analyst Notes: - CISA ADP Vulnrichment: References: - https://me.sap.com/notes/3433545 - https://me.sap.com/notes/3515653 - https://url.sap/sapsecuritypatchday
CVE ID: CVE-2024-28167 State: PUBLISHED Published: 2024-04-09T00:55:46.326Z Last Updated: 2024-08-02T00:48:49.373Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: SAP_SE Products: SAP Group Reporting Data Collection (Enter Package Data) Problem Types: CWE-862 Description: SAP Group Reporting Data Collection does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, specific data can be changed via the Enter Package Data app although the user does not have sufficient authorization causing high impact on Integrity of the appliction. Additional Analyst Notes: - CISA ADP Vulnrichm
ficient authorization causing high impact on Integrity of the appliction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3442378 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
CVE ID: CVE-2024-28168 State: PUBLISHED Published: 2024-10-09T12:04:03.835Z Last Updated: 2024-10-09T15:02:59.140Z Vendors: Apache Software Foundation Products: Apache XML Graphics FOP Problem Types: CWE-611 Description: Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://xmlgraphics.apache.org/security.html
CVE ID: CVE-2024-28169 State: PUBLISHED Published: 2024-11-13T21:08:18.759Z Last Updated: 2024-11-14T19:45:18.138Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: n/a Products: BigDL software maintained by Intel(R) Problem Types: denial of service, CWE-319 Description: Cleartext transmission of sensitive information for some BigDL software maintained by Intel(R) before version 2.5.0 may allow an authenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01146.html
CVE ID: CVE-2024-28170 State: PUBLISHED Published: 2024-09-16T16:38:40.253Z Last Updated: 2024-09-16T17:37:56.085Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) RAID Web Console Problem Types: information disclosure, CWE-284 Description: Improper access control in Intel(R) RAID Web Console all versions may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html
CVE ID: CVE-2024-28171 State: PUBLISHED Published: 2024-03-21T22:19:36.480Z Last Updated: 2024-08-28T14:18:49.656Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-22 Description: It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-12
CVE ID: CVE-2024-28172 State: PUBLISHED Published: 2024-08-14T13:45:21.618Z Last Updated: 2024-08-15T15:13:58.795Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Trace Analyzer and Collector software Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01117.html
CVE ID: CVE-2024-28173 State: PUBLISHED Published: 2024-03-06T16:52:10.211Z Last Updated: 2024-08-02T00:48:49.258Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-201 Description: In JetBrains TeamCity between 2023.11 and 2023.11.4 custom build parameters of the "password" type could be disclosed Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-28174 State: PUBLISHED Published: 2024-03-06T16:52:10.853Z Last Updated: 2024-08-02T00:48:49.417Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-863 Description: In JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage plugin were authorized improperly Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-28175 State: PUBLISHED Published: 2024-03-13T20:48:05.363Z Last Updated: 2024-08-21T23:20:32.107Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: argoproj Products: argo-cd Problem Types: CWE-79 Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Due to the improper URL protocols filtering of links specified in the `link.argocd.argoproj.io` annotations in the application summary component, an attacker can achieve cross-site scripting with elevated permissions. All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to a cross-site scripting (XSS) bug allowing a malicious user to inject a jav
rgo CD starting with v1.0.0 are vulnerable to a cross-site scripting (XSS) bug allowing a malicious user to inject a javascript: link in the UI. When clicked by a victim user, the script will execute with the victim's permissions (up to and including admin). This vulnerability allows an attacker to perform arbitrary actions on behalf of the victim via the API, such as creating, modifying, and deleting Kubernetes resources. A patch for this vulnerability has been released in Argo CD versions v2.10.3 v2.9.8, and v2.8.12. There are no completely-safe workarounds besides upgrading. The safest alternative, if upgrading is not possible, would be to create a Kubernetes admission controller to rejec
ing. The safest alternative, if upgrading is not possible, would be to create a Kubernetes admission controller to reject any resources with an annotation starting with link.argocd.argoproj.io or reject the resource if the value use an improper URL protocol. This validation will need to be applied in all clusters managed by ArgoCD. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/argoproj/argo-cd/security/advisories/GHSA-jwv5-8mqv-g387 - https://github.com/argoproj/argo-cd/commit/479b5544b57dc9ef767d49f7003f39602c480b71
CVE ID: CVE-2024-28176 State: PUBLISHED Published: 2024-03-09T00:43:06.930Z Last Updated: 2025-02-13T17:47:26.104Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: panva Products: jose Problem Types: CWE-400 Description: jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT), JSON Web Signature (JWS), JSON Web Encryption (JWE), JSON Web Key (JWK), JSON Web Key Set (JWKS), and more. A vulnerability has been identified in the JSON Web Encryption (JWE) decryption interfaces, specifically related to the support for decompressing plaintext after its decryption. Under certain conditions it is possible to have t
lated to the support for decompressing plaintext after its decryption. Under certain conditions it is possible to have the user's environment consume unreasonable amount of CPU time or memory during JWE Decryption operations. This issue has been patched in versions 2.0.7 and 4.15.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/panva/jose/security/advisories/GHSA-hhhv-q57g-882q - https://github.com/panva/jose/commit/02a65794f7873cdaf12e81e80ad076fcdc4a9314 - https://github.com/panva/jose/commit/1b91d88d2f8233f3477a5f4579aa5f8057b2ee8b - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message
77a5f4579aa5f8057b2ee8b - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XJDO5VSIAOGT2WP63AXAAWNRSVJCNCRH/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXKGNCRU7OTM5AHC7YIYBNOWI742PRMY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6MMWFBOXJA6ZCXNVPDFJ4XMK5PVG5RG/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJO2U5ACZVACNQXJ5EBRFLFW6DP5BROY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UG5FSEYJ3GP27FZXC5YAAMMEC5XWKJHG/
CVE ID: CVE-2024-28179 State: PUBLISHED Published: 2024-03-20T19:54:38.247Z Last Updated: 2024-08-02T00:48:49.393Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: jupyterhub Products: jupyter-server-proxy Problem Types: CWE-306 Description: Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access. Prior to versions 3.2.3 and 4.1.1, Jupyter Server Proxy did not check user authentication appropriately when proxying websockets, allowing unauthenticated access to anyone who had network access to the Jupyter server endpoint. This vulnerability can allow unauthenticated r
d access to anyone who had network access to the Jupyter server endpoint. This vulnerability can allow unauthenticated remote access to any websocket endpoint set up to be accessible via Jupyter Server Proxy. In many cases, this leads to remote unauthenticated arbitrary code execution, due to how affected instances use websockets. The websocket endpoints exposed by `jupyter_server` itself is not affected. Projects that do not rely on websockets are also not affected. Versions 3.2.3 and 4.1.1 contain a fix for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jupyterhub/jupyter-server-proxy/security/advisories/GHSA-w3vc-fx
CVE Program Container: References: - https://github.com/jupyterhub/jupyter-server-proxy/security/advisories/GHSA-w3vc-fx9p-wp4v - https://github.com/jupyterhub/jupyter-server-proxy/commit/764e499f61a87641916a7a427d4c4b1ac3f321a9 - https://github.com/jupyterhub/jupyter-server-proxy/commit/bead903b7c0354b6efd8b4cde94b89afab653e03 - https://github.com/jupyterhub/jupyter-server-proxy/blob/9b624c4d9507176334b46a85d94a4aa3bcd29bed/jupyter_server_proxy/handlers.py#L433
CVE ID: CVE-2024-28180 State: PUBLISHED Published: 2024-03-09T00:54:46.382Z Last Updated: 2025-02-13T17:47:27.104Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: go-jose Products: go-jose Problem Types: CWE-409 Description: Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1,
ld exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/go-jose/go-jose/security/advisories/GHSA-c5q2-7r4c-mv6g - https://github.com/go-jose/go-jose/commit/0dd4dd541c665fb292d664f77604ba694726f298 - https://github.com/go-jose/go-jose/commit/add6a284ea0f844fd6628cba637be5451fe4b28a - https://github.com/go-jose/go-jose/commit/f4c051a0653d78199a053892f7619ebf96339502 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XJDO5VSIAOGT2WP63AXAAWNRSVJCNCRH/ - https://l
project.org/archives/list/package-announce@lists.fedoraproject.org/message/XJDO5VSIAOGT2WP63AXAAWNRSVJCNCRH/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXKGNCRU7OTM5AHC7YIYBNOWI742PRMY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6MMWFBOXJA6ZCXNVPDFJ4XMK5PVG5RG/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJO2U5ACZVACNQXJ5EBRFLFW6DP5BROY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UG5FSEYJ3GP27FZXC5YAAMMEC5XWKJHG/ - https://lists.fedoraproject.org/archives/list/package-announce@li
roject.org/message/UG5FSEYJ3GP27FZXC5YAAMMEC5XWKJHG/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IJ6LAJJ2FTA2JVVOACCV5RZTOIZLXUNJ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JNPMXL36YGS3GQEVI3Q5HKHJ7YAAQXL5/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MSOMHDKRPU3A2JEMRODT2IREDFBLVPGS/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ/
CVE ID: CVE-2024-28181 State: PUBLISHED Published: 2024-03-14T17:24:25.460Z Last Updated: 2024-08-02T00:48:49.558Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: hopsoft Products: turbo_boost-commands Problem Types: CWE-74 Description: turbo_boost-commands is a set of commands to help you build robust reactive applications with Rails & Hotwire. TurboBoost Commands has existing protections in place to guarantee that only public methods on Command classes can be invoked; however, the existing checks aren't as robust as they should be. It's possible for a sophisticated attacker to invoke more methods than should be permitted depending on the the strictness of au
sible for a sophisticated attacker to invoke more methods than should be permitted depending on the the strictness of authorization checks that individual applications enforce. Being able to call some of these methods can have security implications. Commands verify that the class must be a `Command` and that the method requested is defined as a public method; however, this isn't robust enough to guard against all unwanted code execution. The library should more strictly enforce which methods are considered safe before allowing them to be executed. This issue has been addressed in versions 0.1.3, and 0.2.2. Users are advised to upgrade. Users unable to upgrade should see the repository GHSA f
sed in versions 0.1.3, and 0.2.2. Users are advised to upgrade. Users unable to upgrade should see the repository GHSA for workaround advice. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hopsoft/turbo_boost-commands/security/advisories/GHSA-mp76-7w5v-pr75 - https://github.com/hopsoft/turbo_boost-commands/commit/88af4fc0ac39cc1799d16c49fab52f6dfbcec9ba
CVE ID: CVE-2024-28182 State: PUBLISHED Published: 2024-04-04T14:41:36.587Z Last Updated: 2025-11-04T18:30:26.332Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: nghttp2 Products: nghttp2 Problem Types: CWE-770 Description: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround
mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q - https://github.com/nghttp2/nghttp2/commit/00201ecd8f982da3b67d4f6868af72a1b03b14e0 - https://github.com/nghttp2/nghttp2/commit/d71a4668c6bead55805d18810d633fbb98315af9 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGOME6ZXJG7664IPQNVE3DL67E3YP3HY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/
ME6ZXJG7664IPQNVE3DL67E3YP3HY/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J6ZMXUGB66VAXDW5J6QSTHM5ET25FGSA/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXJO2EASHM2OQQLGVDY5ZSO7UVDVHTDK/ - https://lists.debian.org/debian-lts-announce/2024/04/msg00026.html - http://www.openwall.com/lists/oss-security/2024/04/03/16