deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-26128
Published: 2022-03-03
Description: A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in the babel_packet_examin function in babeld/message.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-1284
References: https://github.com/FRRouting/frr/issues/10502; https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html; https://github.com/FRRouting/frr/issues/10502
CVE: CVE-2022-26129
Published: 2022-03-03
Description: Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functions, parse_hello_subtlv, parse_ihu_subtlv, and parse_update_subtlv in babeld/message.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://github.com/FRRouting/frr/issues/10503; https://lists.debian.org/debian-lts-announce/2024/04/msg00019.html; https://github.com/FRRouting/frr/issues/10503
CVE: CVE-2021-3602
Published: 2022-03-03
Description: An information disclosure flaw was found in Buildah, when building containers using chroot isolation. Running processes in container builds (e.g. Dockerfile RUN commands) can access environment variables from parent and grandparent processes. When run in a container in a CI/CD environment, environment variables may include sensitive information that was shared with the container in order to be used only by Buildah itself (e.g. container registry credentials).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-212
References: https://bugzilla.redhat.com/show_bug.cgi?id=1969264; https://github.com/containers/buildah/commit/a468ce0ffd347035d53ee0e26c205ef604097fb0; https://github.com/containers/buildah/security/advisories/GHSA-7638-r9r3-rmjj
CVE: CVE-2021-3609
Published: 2022-03-03
Description: .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: https://bugzilla.redhat.com/show_bug.cgi?id=1971651; https://github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md; https://github.com/torvalds/linux/commit/d5f9023fa61ee8b94f37a93f08e94b136cf1e463
CVE: CVE-2021-3620
Published: 2022-03-03
Description: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://bugzilla.redhat.com/show_bug.cgi?id=1975767; https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELOG-v2.9.rst#security-fixes; https://github.com/ansible/ansible/commit/fe28767970c8ec62aabe493c46b53a5de1e5fac0
CVE: CVE-2022-0492
Published: 2022-03-03
Description: A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287, CWE-862
References: http://packetstormsecurity.com/files/166444/Kernel-Live-Patch-Security-Notice-LSN-0085-1.html; http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html; http://packetstormsecurity.com/files/176099/Docker-cgroups-Container-Escape.html
CVE: CVE-2022-22700
Published: 2022-03-03
Description: CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In certain configurations, that response header contains different, predictable value ranges which can be used to determine whether a user exists in the tenant.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-330
References: https://docs.cyberark.com/Product-Doc/OnlineHelp/Idaptive/Latest/en/Content/ReleaseNotes/ReleaseNotes-Latest.htm; https://fluidattacks.com/advisories/porter/; https://docs.cyberark.com/Product-Doc/OnlineHelp/Idaptive/Latest/en/Content/ReleaseNotes/ReleaseNotes-Latest.htm
CVE: CVE-2022-23898
Published: 2022-03-03
Description: MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via the categoryId parameter in the file IContentDao.xml.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/ming-soft/MCMS/issues/62; https://github.com/ming-soft/MCMS/issues/62
CVE: CVE-2022-23899
Published: 2022-03-03
Description: MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/ming-soft/MCMS/issues/63; https://github.com/ming-soft/MCMS/issues/63
CVE: CVE-2022-25125
Published: 2022-03-03
Description: MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file /mdiy/dict/listExcludeApp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gitee.com/mingSoft/MCMS/issues/I4TGYI; https://gitee.com/mingSoft/MCMS/issues/I4TGYI
CVE: CVE-2022-24724
Published: 2022-03-03
Description: cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark. Prior to versions 0.29.0.gfm.3 and 0.28.3.gfm.21, an integer overflow in cmark-gfm's table row parsing `table.c:row_from_string` may lead to heap memory corruption when parsing tables who's marker rows contain more than UINT16_MAX columns. The impact of this heap corruption ranges from Information Leak to Arbitrary Code Execution depending on how and where `cmark-gfm` is used. If `cmark-gfm` is used for rendering remote user controlled markdown, this vulnerability may lead to Remote Code Execution (RCE) in applications employing affected versions of the `cmark-gfm` library. This vulnerability has been patched in the following cmark-gfm versions 0.29.0.gfm.3 and 0.28.3.gfm.21. A workaround is available. The vulnerability exists in the table markdown extensions of cmark-gfm. Disabling the table extension will prevent this vulnerability from being triggered.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://packetstormsecurity.com/files/166599/cmark-gfm-Integer-overflow.html; https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5CYUU662VO6CCXQKVZVOHXX3RGIF2DLQ/
CVE: CVE-2022-21716
Published: 2022-03-03
Description: Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is able to accept an infinite amount of data for the peer's SSH version identifier. This ends up with a buffer using all the available memory. The attach is a simple as `nc -rv localhost 22 < /dev/zero`. A patch is available in version 22.2.0. There are currently no known workarounds.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-770
References: https://github.com/twisted/twisted/commit/89c395ee794e85a9657b112c[PII_REDACTED]330ef9; https://github.com/twisted/twisted/releases/tag/twisted-22.2.0; https://github.com/twisted/twisted/security/advisories/GHSA-rv6r-3f5q-9rgx
CVE: CVE-2022-24723
Published: 2022-03-03
Description: URI.js is a Javascript URL mutation library. Before version 1.19.9, whitespace characters are not removed from the beginning of the protocol, so URLs are not parsed properly. This issue has been patched in version 1.19.9. Removing leading whitespace from values before passing them to URI.parse can be used as a workaround.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/medialize/URI.js/releases/tag/v1.19.9; https://github.com/medialize/URI.js/security/advisories/GHSA-gmv4-r438-p67f; https://github.com/medialize/uri.js/commit/86d10523a6f6e8dc4300d99d671335ee362ad316
CVE: CVE-2021-22686
Published: 2022-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-22687
Published: 2022-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-22688
Published: 2022-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-22689
Published: 2022-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-22690
Published: 2022-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-22691
Published: 2022-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-22692
Published: 2022-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-22693
Published: 2022-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-22694
Published: 2022-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-22695
Published: 2022-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-38577
Published: 2022-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2021-38578
Published: 2022-03-03
Description: Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
CVSS Score: 7.4 (HIGH)
CWE: CWE-124, CWE-787
References: https://bugzilla.tianocore.org/show_bug.cgi?id=3387; https://www.insyde.com/security-pledge/SA-2023024; https://bugzilla.tianocore.org/show_bug.cgi?id=3387
CVE: CVE-2021-3762
Published: 2022-03-03
Description: A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://bugzilla.redhat.com/show_bug.cgi?id=2000795; https://github.com/quay/clair/pull/1379; https://github.com/quay/clair/pull/1380
CVE: CVE-2021-4002
Published: 2022-03-03
Description: A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-459, CWE-401
References: https://bugzilla.redhat.com/show_bug.cgi?id=2025726; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13e4ad2ce8df6e058ef482a31fdd81c725b0f7ea; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a4a118f2eead1d6c49e00765de89878288d4b890
CVE: CVE-2022-0265
Published: 2022-03-03
Description: Improper Restriction of XML External Entity Reference in GitHub repository hazelcast/hazelcast in 5.1-BETA-1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611, CWE-611
References: https://github.com/hazelcast/hazelcast/commit/4d6b666cd0291abd618c3b95cdbb51aa4208e748; https://huntr.dev/bounties/d63972a2-b910-480a-a86b-d1f75d24d563; https://github.com/hazelcast/hazelcast/commit/4d6b666cd0291abd618c3b95cdbb51aa4208e748
CVE: CVE-2022-22943
Published: 2022-03-03
Description: VMware Tools for Windows (11.x.y and 10.x.y prior to 12.0.0) contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest OS due to an uncontrolled search path element.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.vmware.com/security/advisories/VMSA-2022-0007.html; https://www.vmware.com/security/advisories/VMSA-2022-0007.html
CVE: CVE-2022-22947
Published: 2022-03-03
Description: In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-94, CWE-917
References: http://packetstormsecurity.com/files/166219/Spring-Cloud-Gateway-3.1.0-Remote-Code-Execution.html; http://packetstormsecurity.com/files/168742/Spring-Cloud-Gateway-3.1.0-Remote-Code-Execution.html; https://tanzu.vmware.com/security/cve-2022-22947
CVE: CVE-2022-23051
Published: 2022-03-03
Description: PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the 'svg_file' parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://fluidattacks.com/advisories/brown/; https://github.com/1modm/petereport/issues/36; https://fluidattacks.com/advisories/brown/
CVE: CVE-2022-23052
Published: 2022-03-03
Description: PeteReport Version 0.5 contains a Cross Site Request Forgery (CSRF) vulnerability allowing an attacker to trick users into deleting users, products, reports and findings on the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://fluidattacks.com/advisories/jett/; https://github.com/1modm/petereport/issues/34; https://fluidattacks.com/advisories/jett/
CVE: CVE-2022-23708
Published: 2022-03-03
Description: A flaw was discovered in Elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security index, allowing authenticated users with “*” index permissions access to this index.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447
CVE: CVE-2022-23709
Published: 2022-03-03
Description: A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules. A user with this privilege would be able to create new alerting rules or overwrite existing ones. However, any new or modified rules would not be enabled, and a user with this privilege could not modify alerting connectors. This effectively means that Read users could disable existing alerting rules.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264, CWE-862
References: https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447; https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447
CVE: CVE-2022-23710
Published: 2022-03-03
Description: A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern Preview Pane) which could allow arbitrary JavaScript to be executed in a victim’s browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447
CVE: CVE-2022-24725
Published: 2022-03-03
Description: Shescape is a shell escape package for JavaScript. An issue in versions 1.4.0 to 1.5.1 allows for exposure of the home directory on Unix systems when using Bash with the `escape` or `escapeAll` functions from the _shescape_ API with the `interpolation` option set to `true`. Other tested shells, Dash and Zsh, are not affected. Depending on how the output of _shescape_ is used, directory traversal may be possible in the application using _shescape_. The issue was patched in version 1.5.1. As a workaround, manually escape all instances of the tilde character (`~`) using `arg.replace(/~/g, "\\~")`.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-200, CWE-78
References: https://github.com/ericcornelissen/shescape/issues/169; https://github.com/ericcornelissen/shescape/pull/170; https://github.com/ericcornelissen/shescape/security/advisories/GHSA-446w-rrm4-r47f
CVE: CVE-2022-25220
Published: 2022-03-03
Description: PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code inside the markdown descriptions while creating a product, report or finding.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://fluidattacks.com/advisories/armstrong/; https://github.com/1modm/petereport/issues/35; https://fluidattacks.com/advisories/armstrong/
CVE: CVE-2021-26259
Published: 2022-03-03
Description: A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in render_table_row(),in ps-pdf.cxx may lead to arbitrary code execution and denial of service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/michaelrsweet/htmldoc/commit/0ddab26a542c74770317b622e985c52430092ba5; https://github.com/michaelrsweet/htmldoc/issues/417; https://github.com/michaelrsweet/htmldoc/commit/0ddab26a542c74770317b622e985c52430092ba5
CVE: CVE-2021-26948
Published: 2022-03-03
Description: Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-479, CWE-476
References: https://github.com/michaelrsweet/htmldoc/issues/410; https://github.com/michaelrsweet/htmldoc/issues/410
CVE: CVE-2021-3638
Published: 2022-03-03
Description: An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1979858; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTVPHLLXJ65BUMFBUUZ35F3J632SLFRK/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7J5IRXJYLELW7D43A75LOWRUE5EU54O/
CVE: CVE-2021-3640
Published: 2022-03-03
Description: A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=1980646; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/bluetooth/sco.c?h=v5.16&id=99c23da0eed4fd20cae8243f2b51e10e66aa0951; https://github.com/torvalds/linux/commit/99c23da0eed4fd20cae8243f2b51e10e66aa0951
CVE: CVE-2022-0730
Published: 2022-03-03
Description: Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://github.com/Cacti/cacti/issues/4562; https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html; https://lists.debian.org/debian-lts-announce/2022/12/msg00039.html
CVE: CVE-2022-0838
Published: 2022-03-04
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.10.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/hestiacp/hestiacp/commit/640f822d306ffb3eddf8ce2f46de75d7344283c1; https://huntr.dev/bounties/bd2fb1f1-cc8b-4ef7-8e2b-4ca686d8d614; https://github.com/hestiacp/hestiacp/commit/640f822d306ffb3eddf8ce2f46de75d7344283c1
CVE: CVE-2022-0848
Published: 2022-03-04
Description: OS Command Injection in GitHub repository part-db/part-db prior to 0.5.11.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/166217/part-db-0.5.11-Remote-Code-Execution.html; https://github.com/part-db/part-db/commit/9cd4eee393028aa4cab70fcbac284b0028c0bc95; https://huntr.dev/bounties/3e91685f-cfb9-4ee4-abaf-9b712a8fd5a6
CVE: CVE-2022-0752
Published: 2022-03-04
Description: Cross-site Scripting (XSS) - Generic in GitHub repository hestiacp/hestiacp prior to 1.5.9.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/hestiacp/hestiacp/commit/ee10e[PII_REDACTED]fc9a2d32169d0da702cea5ad2; https://huntr.dev/bounties/49940dd2-72c2-4607-857a-1fade7e8f080; https://github.com/hestiacp/hestiacp/commit/ee10e[PII_REDACTED]fc9a2d32169d0da702cea5ad2
CVE: CVE-2022-23327
Published: 2022-03-04
Description: A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service (DoS).
CVSS Score: 7.5 (HIGH)
References: http://ethereum.com; http://go-ethereum.com; https://dl.acm.org/doi/pdf/10.1145/3[PII_REDACTED]369
CVE: CVE-2022-23328
Published: 2022-03-04
Description: A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node, which can purge all of pending transactions in a victim node's memory pool and then occupy the memory pool to prevent new transactions from entering the pool, resulting in a denial of service (DoS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://ethereum.com; http://go-ethereum.com; https://dl.acm.org/doi/pdf/10.1145/3[PII_REDACTED]369
CVE: CVE-2021-43392
Published: 2022-03-04
Description: STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to obtain information on cryptographic secrets. This is associated with the ECDSA signature algorithm on the Java Card J-SAFE3 and STSAFE-J platforms exposing a 3.0.4 Java Card API. It is exploitable for STSAFE-J in closed configuration and J-SIGN (when signature verification is activated) but not for J-SAFE3 EPASS BAC and EAC products. It might also impact other products based on the J-SAFE-3 Java Card platform.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-347
References: https://community.st.com/s/toparticles; https://www.cert.ssi.gouv.fr/avis/CERTFR-2022-AVI-169/; https://community.st.com/s/toparticles
CVE: CVE-2021-43393
Published: 2022-03-04
Description: STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to abuse signature verification. This is associated with the ECDSA signature algorithm on the Java Card J-SAFE3 and STSAFE-J platforms exposing a 3.0.4 Java Card API. It is exploitable for STSAFE-J in closed configuration and J-SIGN (when signature verification is activated) but not for J-SAFE3 EPASS BAC and EAC products. It might also impact other products based on the J-SAFE-3 Java Card platform.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-347
References: https://community.st.com/s/toparticles; https://www.cert.ssi.gouv.fr/avis/CERTFR-2022-AVI-169/; https://community.st.com/s/toparticles