deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-30438
Published: 2023-05-17
Description: An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of arbitrary code in other logical partitions on the same physical server.  IBM X-Force ID:  252706.
CVSS Score: 9.3 (CRITICAL)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/252706; https://www.ibm.com/support/pages/node/6993021; https://exchange.xforce.ibmcloud.com/vulnerabilities/252706
CVE: CVE-2023-31698
Published: 2023-05-17
Description: Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product's security model is that users are trusted by the administrator to insert arbitrary content (users cannot create their own accounts through self-registration).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/172462/Bludit-CMS-3.14.1-Cross-Site-Scripting.html; https://github.com/bludit/bludit/issues/1212#issuecomment-649514491; https://github.com/bludit/bludit/issues/1369#issuecomment-940806199
CVE: CVE-2023-31699
Published: 2023-05-17
Description: ChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/ChurchCRM/CRM/issues/6471; https://github.com/ChurchCRM/CRM/issues/6471
CVE: CVE-2023-31702
Published: 2023-05-17
Description: SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/172545/eScan-Management-Console-14.0.1400.2281-SQL-Injection.html; https://github.com/sahiloj/CVE-2023-31702/blob/main/README.md; http://packetstormsecurity.com/files/172545/eScan-Management-Console-14.0.1400.2281-SQL-Injection.html
CVE: CVE-2023-31703
Published: 2023-05-17
Description: Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/172540/eScan-Management-Console-14.0.1400.2281-Cross-Site-Scripting.html; https://github.com/sahiloj/CVE-2023-31703/blob/main/README.md; http://packetstormsecurity.com/files/172540/eScan-Management-Console-14.0.1400.2281-Cross-Site-Scripting.html
CVE: CVE-2023-31902
Published: 2023-05-17
Description: RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).
CVSS Score: 9.8 (CRITICAL)
References: https://www.exploit-db.com/exploits/51010; https://www.redpacketsecurity.com/mobile-mouse-code-execution/; https://www.exploit-db.com/exploits/51010
CVE: CVE-2023-31903
Published: 2023-05-17
Description: GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/blue0x1/GuppY-exploit-rce; https://www.exploit-db.com/exploits/51052; https://github.com/blue0x1/GuppY-exploit-rce
CVE: CVE-2023-31904
Published: 2023-05-17
Description: savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.exploit-db.com/exploits/51015; https://www.exploit-db.com/exploits/51015
CVE: CVE-2023-31700
Published: 2023-05-17
Description: TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceAdd.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://github.com/FirmRec/IoT-Vulns/blob/main/tp-link/postPlcJson/report.md; https://github.com/FirmRec/IoT-Vulns/blob/main/tp-link/postPlcJson/report.md
CVE: CVE-2023-31701
Published: 2023-05-17
Description: TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceRemove.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://github.com/FirmRec/IoT-Vulns/blob/main/tp-link/postPlcJson/report.md; https://github.com/FirmRec/IoT-Vulns/blob/main/tp-link/postPlcJson/report.md
CVE: CVE-2023-31722
Published: 2023-05-17
Description: There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://bugzilla.nasm.us/show_bug.cgi?id=3392857#c1; https://bugzilla.nasm.us/show_bug.cgi?id=3392857#c1
CVE: CVE-2023-31723
Published: 2023-05-17
Description: yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.
CVSS Score: 5.5 (MEDIUM)
References: https://github.com/DaisyPo/fuzzing-vulncollect/blob/main/yasm/SEGV/nasm-pp.c:4008%20in%20expand_mmac_params/README.md; https://github.com/yasm/yasm/issues/220; https://github.com/DaisyPo/fuzzing-vulncollect/blob/main/yasm/SEGV/nasm-pp.c:4008%20in%20expand_mmac_params/README.md
CVE: CVE-2023-31724
Published: 2023-05-17
Description: yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.
CVSS Score: 7.8 (HIGH)
References: https://github.com/DaisyPo/fuzzing-vulncollect/tree/main/yasm/SEGV/nasm-pp.c:3570%20in%20do_directive; https://github.com/yasm/yasm/issues/222; https://github.com/DaisyPo/fuzzing-vulncollect/tree/main/yasm/SEGV/nasm-pp.c:3570%20in%20do_directive
CVE: CVE-2023-31725
Published: 2023-05-17
Description: yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expand_mmac_params at yasm/modules/preprocs/nasm/nasm-pp.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://github.com/DaisyPo/fuzzing-vulncollect/tree/main/yasm/heap-use-after-free/nasm-pp.c:3878%20in%20expand_mmac_params; https://github.com/yasm/yasm/issues/221; https://github.com/DaisyPo/fuzzing-vulncollect/tree/main/yasm/heap-use-after-free/nasm-pp.c:3878%20in%20expand_mmac_params
CVE: CVE-2023-22348
Published: 2023-05-17
Description: Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://checkmk.com/werk/13982; https://checkmk.com/werk/13982
CVE: CVE-2023-2765
Published: 2023-05-17
Description: A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown code of the file /E-mobile/App/System/File/downfile.php. The manipulation of the argument url leads to absolute path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-229270 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-36
References: https://github.com/eckert-lcc/cve/blob/main/Weaver%20oa.md; https://vuldb.com/?ctiid.229270; https://vuldb.com/?id.229270
CVE: CVE-2023-2766
Published: 2023-05-17
Description: A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2_config.ini. The manipulation leads to files or directories accessible. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229271. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-552
References: https://github.com/8079048q/cve/blob/main/weaveroa.md; https://vuldb.com/?ctiid.229271; https://vuldb.com/?id.229271
CVE: CVE-2023-2768
Published: 2023-05-17
Description: A vulnerability was found in Sucms 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin_ads.php?action=add. The manipulation of the argument intro leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-229274 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/Upgradeextension/Sucms-v1.0/blob/main/README.md; https://vuldb.com/?ctiid.229274; https://vuldb.com/?id.229274
CVE: CVE-2023-24805
Published: 2023-05-17
Description: cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. If you use the Backend Error Handler (beh) to create an accessible network printer, this security vulnerability can cause remote code execution. `beh.c` contains the line `retval = system(cmdline) >> 8;` which calls the `system` command with the operand `cmdline`. `cmdline` contains multiple user controlled, unsanitized values. As a result an attacker with network access to the hosted print server can exploit this vulnerability to inject system commands which are executed in the context of the running server. This issue has been addressed in commit `8f2740357` and is expected to be bundled in the next release. Users are advised to upgrade when possible and to restrict access to network printers in the meantime.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/OpenPrinting/cups-filters/commit/8f274035756c04efeb77eb654e9d4c4447287d65; https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-gpxc-v2m8-fr3x; https://lists.debian.org/debian-lts-announce/2023/05/msg00021.html
CVE: CVE-2023-26044
Published: 2023-05-17
Description: react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP.  Previous versions of ReactPHP's HTTP server component contain a potential DoS vulnerability that can cause high CPU load when processing large HTTP request bodies. This vulnerability has little to no impact on the default configuration, but can be exploited when explicitly using the RequestBodyBufferMiddleware with very large settings. This might lead to consuming large amounts of CPU time for processing requests and significantly delay or slow down the processing of legitimate user requests. This issue has been addressed in release 1.9.0. Users are advised to upgrade. Users unable to upgrade may keep the request body limited using RequestBodyBufferMiddleware with a sensible value which should mitigate the issue. An infrastructure or DevOps workaround could be to place a reverse proxy in front of the ReactPHP HTTP server to filter out any excessive HTTP request bodies.

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: https://github.com/reactphp/http/commit/9681f764b80c45ebfb5fe2ea7da5bd3babfcdcfd; https://github.com/reactphp/http/security/advisories/GHSA-95x4-j7vc-h8mf; https://github.com/reactphp/http/commit/9681f764b80c45ebfb5fe2ea7da5bd3babfcdcfd
CVE: CVE-2023-2769
Published: 2023-05-17
Description: A vulnerability classified as critical has been found in SourceCodester Service Provider Management System 1.0. This affects an unknown part of the file /classes/Master.php?f=delete_service. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229275.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Serviced-Providerd-Managementd-Systemd--d-SQLd-injections.md; https://vuldb.com/?ctiid.229275; https://vuldb.com/?id.229275
CVE: CVE-2023-2770
Published: 2023-05-17
Description: A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects unknown code of the file /kelasdosen/data. The manipulation of the argument columns[1][data] leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229276.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/tht1997/CVE_2023/blob/main/online_exam/kelasdosen.md; https://vuldb.com/?ctiid.229276; https://vuldb.com/?id.229276
CVE: CVE-2023-31135
Published: 2023-05-17
Description: Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 bytes come from a baseIv which is initialized when an audit log is created. The last 4 bytes come from the length of the log line being encrypted. This is problematic because two log lines will often have the same length, so due to these collisions we are reusing the same nonce many times. All audit logs generated by versions of Dgraph <v23.0.0 are affected. Attackers must have access to the system the logs are stored on. Dgraph users should upgrade to v23.0.0. Users unable to upgrade should store existing audit logs in a secure location and for extra security, encrypt using an external tool like `gpg`.
CVSS Score: 3.3 (LOW)
CWE: CWE-326
References: https://en.wikipedia.org/wiki/Cryptographic_nonce; https://github.com/dgraph-io/dgraph/pull/8323; https://github.com/dgraph-io/dgraph/security/advisories/GHSA-92wq-q9pq-gw47
CVE: CVE-2023-2771
Published: 2023-05-17
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Online Exam System 1.0. This issue affects some unknown processing of the file /jurusanmatkul/data. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-229277 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/tht1997/CVE_2023/blob/main/online_exam/kelasdosen.md; https://vuldb.com/?ctiid.229277; https://vuldb.com/?id.229277
CVE: CVE-2023-2772
Published: 2023-05-17
Description: A vulnerability, which was classified as critical, was found in SourceCodester Budget and Expense Tracker System 1.0. Affected is an unknown function of the file /admin/budget/manage_budget.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-229278 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/wucwu1/CVEApplication/blob/main/SQL.md; https://vuldb.com/?ctiid.229278; https://vuldb.com/?id.229278
CVE: CVE-2023-2773
Published: 2023-05-17
Description: A vulnerability has been found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file view_admin.php. The manipulation of the argument adminid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229279.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://gitee.com/zyz0103/system-vul/blob/master/Bus%20Dispatch%20and%20Information%20System%20in%20adminid%20has%20Sql%20injection%20vulnerabilities.pdf; https://vuldb.com/?ctiid.229279; https://vuldb.com/?id.229279
CVE: CVE-2023-27233
Published: 2023-05-17
Description: Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_list_backend.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://gist.github.com/renanavs/dcb13bb1cd618ce7eb0c80290b837245; https://github.com/Piwigo/Piwigo/issues/1872; https://gist.github.com/renanavs/dcb13bb1cd618ce7eb0c80290b837245
CVE: CVE-2023-29837
Published: 2023-05-17
Description: Cross Site Scripting vulnerability found in Exelysis Unified Communication Solution (EUCS) v.1.0 allows a remote attacker to gain privileges via the URL path of the eucsAdmin login web page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/IthacaLabs/Exelysis; https://github.com/IthacaLabs/Exelysis/blob/main/EUCS%20Admin%20Login%20XSS_CVE-2023-29836_CVE-2023-29837.txt; https://github.com/IthacaLabs/Exelysis
CVE: CVE-2023-2774
Published: 2023-05-17
Description: A vulnerability was found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file view_branch.php. The manipulation of the argument branchid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229280.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/mrwwrrhh/Bus_Dispatch_and_Information_System/blob/main/Bus%20Dispatch%20and%20Information%20System%20in%20view_branch%20%20has%20Sql%20injection%20vulnerabilities.pdf; https://vuldb.com/?ctiid.229280; https://vuldb.com/?id.229280
CVE: CVE-2023-2775
Published: 2023-05-17
Description: A vulnerability was found in code-projects Bus Dispatch and Information System 1.0. It has been classified as critical. This affects an unknown part of the file adminHome.php. The manipulation of the argument reach_city leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-229281 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/mrwwrrhh/Bus_Dispatch_and_Information_System/blob/main/Bus%20Dispatch%20and%20Information%20System%20in%20login_info%20has%20Sql%20injection%20vulnerabilities.pdf; https://vuldb.com/?ctiid.229281; https://vuldb.com/?id.229281
CVE: CVE-2023-2776
Published: 2023-05-17
Description: A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-229282 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://gitee.com/zyz0103/system-vul/blob/master/Simple%20Photo%20Gallery%20In%20PHP%20With%20Source%20Code%20has%20file%20upload%20vulnerability.pdf; https://vuldb.com/?ctiid.229282; https://vuldb.com/?id.229282
CVE: CVE-2023-30191
Published: 2023-05-17
Description: PrestaShop cdesigner < 3.1.9 is vulnerable to SQL Injection via CdesignerTraitementModuleFrontController::initContent().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://friends-of-presta.github.io/security-advisories/modules/2023/05/17/cdesigner-89.html; https://friends-of-presta.github.io/security-advisories/modules/2023/05/17/cdesigner-89.html
CVE: CVE-2023-32767
Published: 2023-05-17
Description: The web interface of Symcon IP-Symcon before 6.3 (i.e., before 2023-05-12) allows a remote attacker to read sensitive files via .. directory-traversal sequences in the URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://community.symcon.de/t/ip-symcon-6-3-stable-changelog/40276/87; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-014.txt; https://community.symcon.de/t/ip-symcon-6-3-stable-changelog/40276/87
CVE: CVE-2023-2780
Published: 2023-05-17
Description: Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-29
References: https://github.com/mlflow/mlflow/commit/fae77a525dd908c56d6204a4cef1c1c75b4e9857; https://huntr.dev/bounties/b12b0073-0bb0-4bd1-8fc2-ec7f17fd7689; https://github.com/mlflow/mlflow/commit/fae77a525dd908c56d6204a4cef1c1c75b4e9857
CVE: CVE-2023-1972
Published: 2023-05-17
Description: A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=2185646; https://security.gentoo.org/glsa/202309-15; https://sourceware.org/bugzilla/show_bug.cgi?id=30285
CVE: CVE-2023-2203
Published: 2023-05-17
Description: A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205 security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/errata/RHSA-2023:2653; https://access.redhat.com/errata/RHSA-2023:3108; https://access.redhat.com/security/cve/CVE-2023-2203
CVE: CVE-2023-2491
Published: 2023-05-17
Description: A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://access.redhat.com/errata/RHSA-2023:2626; https://access.redhat.com/errata/RHSA-2023:3104; https://access.redhat.com/security/cve/CVE-2023-2491
CVE: CVE-2023-2731
Published: 2023-05-17
Description: A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://access.redhat.com/security/cve/CVE-2023-2731; https://bugzilla.redhat.com/show_bug.cgi?id=2207635; https://github.com/libsdl-org/libtiff/commit/9be22b639ea69e102d3847dca4c53ef025e9527b
CVE: CVE-2023-1859
Published: 2023-05-17
Description: A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux Kernel. This flaw could allow a local attacker to crash the system due to a race problem, possibly leading to a kernel information leak.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://lore.kernel.org/all/[PII_REDACTED]0[PII_REDACTED]-1-zyytlz.wz%40163.com/; https://lore.kernel.org/all/[PII_REDACTED]0[PII_REDACTED]-1-zyytlz.wz%40163.com/
CVE: CVE-2023-2295
Published: 2023-05-17
Description: A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the libreswan responder SPI as its own initiator SPI, the pluto daemon state machine crashes. No remote code execution is possible. This CVE exists because of a CVE-2023-30570 security regression for libreswan package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://access.redhat.com/errata/RHSA-2023:3107; https://access.redhat.com/errata/RHSA-2023:3148; https://access.redhat.com/security/cve/CVE-2023-2295
CVE: CVE-2023-2319
Published: 2023-05-17
Description: It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 (for PCS package), which was previously addressed in Red Hat Enterprise Linux 9.1 via erratum RHSA-2023:1591. The CVE-2023-2319 was assigned to that Red Hat specific security regression in Red Hat Enterprise Linux 9.2.
CVSS Score: 9.8 (CRITICAL)
References: https://access.redhat.com/errata/RHSA-2023:2652; https://access.redhat.com/security/cve/CVE-2023-2319; https://bugzilla.redhat.com/show_bug.cgi?id=2190092