huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2022-23606: envoy: Stack exhaustion when a cluster is deleted via Cluster Discovery Service
Component: envoy
Severity: Moderate
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-02-22T07:00:00+00:00

A flaw was found in envoy. When a cluster is deleted via the Cluster Discovery Service, a stack exhaustion may occur.


Affected upstream versions: >= 1.20.0, < 1.20.2, >= 1.21.0, < 1.21.1
Fixed upstream versions: v1.22.0
Upstream repository: https://github.com/envoyproxy/envoy
Upstream fix commit: 4b6dd3b53cd5c6d4d4df378a2fc62c1707522b31
CVE-2022-23633: rubygem-actionpack: information leak between requests
Component: rubygem-actionpack
Severity: Moderate
CWE: CWE-212 (Improper Removal of Sensitive Information Before Storage or Transfer)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Public date: 2022-02-11T00:00:00+00:00

A flaw was found in the Rack middleware package of RubyGems, where response bodies will not close under certain circumstances. This flaw allows an attacker to iterate requests to force ActionDispatch::Executor to not close, allowing subsequent requests to leak data from ActiveSupport::CurrentAttributes.


Affected upstream versions: >= 7.0.0.0, < 7.0.2.1, >= 6.1.0.0, < 6.1.4.5, >= 6.0.0.0, < 6.0.4.5, >= 5.0.0, < 5.2.6.1
Fixed upstream versions: v7.1.0
Upstream repository: https://github.com/rails/rails
Upstream fix commit: f9a2ad03943d5c2ba54e1d45f155442b519c75da
CVE-2022-23634: rubygem-puma: rubygem-rails: information leak between requests
Component: rubygem-puma
Severity: Important
CWE: CWE-359 (Exposure of Private Personal Information to an Unauthorized Actor)
CVSS v3: 8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N)
Public date: 2022-02-11T00:00:00+00:00

A flaw was found in Puma and Rails rubygems when response bodies were not closed under certain situations. This flaw allows an attacker, by iterating certain requests, to take advantage of this issue and affect CurrentAttributes, leading to leaked data.


Affected upstream versions: >= 5.0.0, < 5.6.2, < 4.3.11
Fixed upstream versions: v5.6.3
Upstream repository: https://github.com/puma/puma
Upstream fix commit: b70f451fe8abc0cff192c065d549778452e155bb
CVE-2022-23635: istio: unauthenticated control plane denial of service attack
Component: istio
Severity: Moderate
CWE: CWE-287 (Improper Authentication)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-02-22T00:00:00+00:00

A flaw was found in istio. This flaw allows an attacker to send a specially crafted message to isitiod, causing the control plane to crash.


Affected upstream versions: >= 1.13.0, < 1.13.1, >= 1.12.0, < 1.12.4, < 1.11.7
Fixed upstream versions: 1.13.1
Upstream repository: https://github.com/istio/istio
Upstream fix commit: 5f3b5ed958ae75156f8656fe7b3794f78e94db84
CVE-2022-23645: swtpm: Unchecked header size indicator against expected size
Component: swtpm
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-02-18T00:00:00+00:00

An out-of-bounds read vulnerability was found in swtpm. The vulnerability exists due to a boundary condition when the byte array representing the state of the TPM is accessed. This flaw allows an attacker to send a specially crafted header, triggering an out-of-bounds read access on the byte array containing the TPM's state. This issue can crash swtpm or prevent it from starting.


Affected upstream versions: < 0.5.3, >= 0.6.0, < 0.6.2, = 0.7.0
Fixed upstream versions: v0.8.0
Upstream repository: https://github.com/stefanberger/swtpm
Upstream fix commit: 9f740868fc36761de27df3935513bdebf8852d19
CVE-2022-23647: prismjs: improperly escaped output allows a XSS
Component: prismjs
Severity: Important
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
CVSS v3: 6.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Public date: 2022-02-18T00:00:00+00:00

A Cross-site scripting attack was found in Prism. The command-line plugin did not properly escape its output. This issue leads to the input text being inserted into the Document Object Model (DOM) as HTML code, which can be exploited by an attacker.

Statement: This issue affects Prism as shipped with all versions of Red Hat Ceph Storage, Red Hat Migration Toolkit for Virtualization, Red Hat OpenShift Container Platform, Red Hat OpenShift Service Mesh, Red Hat Advanced Cluster Security, and Red Hat Gluster Storage. However, this flaw is not known to be exploitable under any supported scenario, as websites that do not use the Command Line plugin are also not impacted. The above products do not use the Command Line plugin, thus, are marked not affected.

Affected upstream versions: >= 1.14.0, < 1.27.0
Fixed upstream versions: v1.27.0
Upstream repository: https://github.com/PrismJS/prism
Upstream fix commit: e002e78c343154e1c0ddf9d6a0bb85689e1a5c7c
CVE-2022-23833: django: Denial-of-service possibility in file uploads
Component: django
Severity: Moderate
CWE: CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-02-01T08:00:00+00:00

A flaw was found in Django. The issue occurs when passing certain inputs to multipart forms, resulting in an infinite loop when parsing files.


Affected upstream versions: n/a
Fixed upstream versions: stable/2.2.x
Upstream repository: https://github.com/django/django
Upstream fix commit: c477b761804984c932704554ad35f78a2e230c6a
CVE-2022-23837: sidekiq: WebUI Denial of Service caused by number of days on graph
Component: sidekiq
Severity: Moderate
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-01-22T00:00:00+00:00

A denial of service vulnerability was found in job scheduler sidekiq. An attacker can request statistics for the graph and, since there were no limits on the days parameter, overload the system, affecting the WebUI.


Affected upstream versions: n/a
Fixed upstream versions: v6.4.0
Upstream repository: https://github.com/mperham/sidekiq
Upstream fix commit: 7785ac1399f1b28992adb56055f6acd88fd1d956
CVE-2022-24448: kernel: nfs_atomic_open() returns uninitialized data instead of ENOTDIR
Component: kernel
Severity: Low
CWE: CWE-908 (Use of Uninitialized Resource)
CVSS v3: 3.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Public date: 2022-02-04T00:00:00+00:00

A flaw was found in the Linux kernel. When an application tries to open a directory (using the O_DIRECTORY flag) in a mounted NFS filesystem, a lookup operation is performed. If the NFS server returns a file as a result of the lookup, the NFS filesystem returns an uninitialized file descriptor instead of the expected ENOTDIR value. This flaw leads to the kernel's data leak into the userspace.


Affected upstream versions: n/a
Fixed upstream versions: v5.17
Upstream repository: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Upstream fix commit: ac795161c93699d600db16c1a8cc23a65a1eceaf
CVE-2022-24713: Mozilla: Denial of Service via complex regular expressions
Component: Mozilla
Severity: Low
CWE: CWE-400 (Uncontrolled Resource Consumption)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-04-05T00:00:00+00:00

regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those (tunable) mitigations already provide sane defaults to prevent attacks. This guarantee is documented and it's considered part of the crate's API. Unfortunately a bug was discovered in the mitigations designed to prevent untrusted regexes to take an arbitrary amount of time during parsing, and it's possible to craft regexes that bypass such mitigations. This makes it possible to perform denial of service attacks by sending specially crafted regexes to services accepting user-controlled, untrusted regexes. All versions of the regex crate before or equal to 1.5.4 are affected by this issue. The fix is include starting from regex 1.5.5. All users accepting user-controlled regexes are recommended to upgrade immediately to the latest version of the regex crate. Unfortunately there is no fixed set of problematic regexes, as there are practically infinite regexes that could be crafted to exploit this vulnerability. Because of this, it us not recommend to deny known problematic regexes.


Affected upstream versions: < 1.5.5
Fixed upstream versions: regex-cli-0.1.0
Upstream repository: https://github.com/rust-lang/regex
Upstream fix commit: ae70b41d4f46641dbc45c7a4f87954aea356283e
CVE-2022-24723: urijs: Leading white space bypasses protocol validation
Component: urijs
Severity: Moderate
CWE: CWE-1173 (Improper Use of Validation Framework)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Public date: 2022-03-03T00:00:00+00:00

An improper input validation flaw was found in urijs where white space characters are not removed from the beginning of an URL. This issue allows bypassing the protocol validation.


Affected upstream versions: < 1.19.9
Fixed upstream versions: v1.19.9
Upstream repository: https://github.com/medialize/uri.js
Upstream fix commit: 86d10523a6f6e8dc4300d99d671335ee362ad316
CVE-2022-24726: istio: Unauthenticated control plane denial of service attack due to stack exhaustion
Component: istio
Severity: Important
CWE: CWE-770 (Allocation of Resources Without Limits or Throttling)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-03-09T20:00:00+00:00

A stack exhaustion flaw was found in the Istio control plane. This flaw allows a remote unauthenticated attacker to send a specially crafted or oversized message to crash the control plane process, resulting in a denial of service condition.


Affected upstream versions: < 1.11.8,, >= 1.12.0, < 1.12.5, >= 1.13.0, < 1.13.2
Fixed upstream versions: 1.13.2
Upstream repository: https://github.com/istio/istio
Upstream fix commit: 6ca5055a4db6695ef5504eabdfde3799f2ea91fd
CVE-2022-24761: waitress: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
Component: waitress
Severity: Important
CWE: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Public date: 2022-03-17T00:00:00+00:00

An Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) flaw was found in Waitress when used behind a proxy that does not properly validate the incoming HTTP request. This flaw allows an attacker to smuggle requests via the front-end proxy to Waitress, resulting in a loss of data integrity.


Affected upstream versions: < 2.1.1
Fixed upstream versions: v2.1.1
Upstream repository: https://github.com/Pylons/waitress
Upstream fix commit: 9e0b8c801e4d505c2ffc91b891af4ba48af715e0
CVE-2022-24769: moby: Default inheritable capabilities for linux container should be empty
Component: moby
Severity: Moderate
CWE: CWE-276 (Incorrect Default Permissions)
CVSS v3: 4.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Public date: 2022-03-23T00:00:00+00:00

A flaw was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. Containers using Linux users and groups to perform privilege separation inside the container are most directly impacted.


Affected upstream versions: < 20.10.14
Fixed upstream versions: client/v0.1.0
Upstream repository: https://github.com/moby/moby
Upstream fix commit: 2bbc786e4c59761d722d2d1518cd0a32829bc07f
CVE-2022-24771: node-forge: Signature verification leniency in checking `digestAlgorithm` structure can lead to signature forgery
Component: node-forge
Severity: Moderate
CWE: CWE-347 (Improper Verification of Cryptographic Signature)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Public date: 2022-03-18T00:00:00+00:00

A flaw was found in the node-forge package. This signature verification leniency allows an attacker to forge a signature.

Statement: This flaw affects the DigestAlgorithm structure.

Affected upstream versions: < 1.3.0
Fixed upstream versions: v1.3.0
Upstream repository: https://github.com/digitalbazaar/forge
Upstream fix commit: 3f0b49a0573ef1bb7af7f5673c0cfebf00424df1
CVE-2022-24772: node-forge: Signature verification failing to check tailing garbage bytes can lead to signature forgery
Component: node-forge
Severity: Moderate
CWE: CWE-347 (Improper Verification of Cryptographic Signature)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Public date: 2022-03-18T00:00:00+00:00

A flaw was found in the node-forge package. This signature verification leniency allows an attacker to forge a signature.

Statement: This flaw affects the DigestInfo ASN.1 structure.

Affected upstream versions: < 1.3.0
Fixed upstream versions: v1.3.0
Upstream repository: https://github.com/digitalbazaar/forge
Upstream fix commit: 3f0b49a0573ef1bb7af7f5673c0cfebf00424df1
CVE-2022-24773: node-forge: Signature verification leniency in checking `DigestInfo` structure
Component: node-forge
Severity: Moderate
CWE: CWE-347 (Improper Verification of Cryptographic Signature)
CVSS v3: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Public date: 2022-03-18T00:00:00+00:00

A flaw was found in the node-forge library when verifying the signature on the ASN.1 structure in RSA PKCS#1 v1.5. This flaw allows an attacker to obtain successful verification for invalid DigestInfo structure, affecting the integrity of the attacked resource.


Affected upstream versions: < 1.3.0
Fixed upstream versions: v1.3.0
Upstream repository: https://github.com/digitalbazaar/forge
Upstream fix commit: 3f0b49a0573ef1bb7af7f5673c0cfebf00424df1
CVE-2022-24778: imgcrypt: Unauthorized access to encryted container image on a shared system due to missing check in CheckAuthorization() code path
Component: imgcrypt
Severity: Important
CWE: CWE-1220 (Insufficient Granularity of Access Control)
CVSS v3: 7.4 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Public date: 2022-03-25T00:00:00+00:00

A flaw was found in the imgcrypt library when checking the keys of an authorized user to access an encrypted image on systems where layers are not available and cannot run on the host architecture. This flaw allows an attacker to run an image without providing the previously decrypted keys.

Statement: Only Fedora is using the affected codebase. Hence, marking other products as of Low impact as they are using an affected version of 'imgcrypt' as a transitive dependency.

Affected upstream versions: < 1.1.4
Fixed upstream versions: v1.1.4
Upstream repository: https://github.com/containerd/imgcrypt
Upstream fix commit: 6fdd9818a4d8142107b7ecd767d839c9707700d9
CVE-2022-24785: Moment.js: Path traversal  in moment.locale
Component: Moment.js
Severity: Moderate
CWE: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Public date: 2022-04-04T00:00:00+00:00

A path traversal vulnerability was found in Moment.js that impacts npm (server) users. This issue occurs if a user-provided locale string is directly used to switch moment locale, which an attacker can exploit to change the correct path to one of their choice. This can result in a loss of integrity.

Statement: In Quay 3.10 and above, no version of affected momentjs is present.

Affected upstream versions: >= 1.0.1, < 2.29.2
Fixed upstream versions: 2.29.2
Upstream repository: https://github.com/moment/moment
Upstream fix commit: 4211bfc8f15746be4019bba557e29a7ba83d54c5
CVE-2022-24790: puma-5.6.4: http request smuggling vulnerabilities
Component: puma-5.6.4
Severity: Important
CWE: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Public date: 2022-03-30T00:00:00+00:00

A HTTP request smuggling flaw was found in puma. This issue occurs when using puma behind a proxy. Puma does not validate incoming HTTP requests, as per RFC specification, leading to loss of integrity.


Affected upstream versions: < 4.3.12, >= 5.0.0, <  5.6.4
Fixed upstream versions: v5.6.4
Upstream repository: https://github.com/puma/puma
Upstream fix commit: 5bb7d202e24dec00a898dca4aa11db391d7787a5
CVE-2022-24795: yajl: heap-based buffer overflow when handling large inputs due to an integer overflow
Component: yajl
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-04-05T00:00:00+00:00

A flaw was found in the YAJL library in the way it reallocates a memory buffer to store more data. A very large input causes the value used to calculate the buffer size to overflow, resulting in a heap-based buffer overflow.

Statement: Red Hat Enterprise Linux only ships YAJL 2.x versions and on 32-bit systems, more than 2GiB of data will be required for triggering this bug. However, on 64-bit systems, more than 9EiB of data will be needed, making this vulnerability very hard to be exploited on these systems.

Affected upstream versions: <= 1.4.1
Upstream repository: https://github.com/brianmario/yajl-ruby
Upstream fix commit: 7168bd79b888900aa94523301126f968a93eb3a6
CVE-2022-24801: python-twisted: possible http request smuggling
Component: python-twisted
Severity: Important
CWE: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'))
CVSS v3: 8.1 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Public date: 2022-04-04T00:00:00+00:00

A flaw was found in python-twisted. This vulnerability occurs due to the parsing of illegal constructs in the twisted.web.http module. The illegal constructs include '+/-' in the Content-Length header, '\n and \t' etc. Non-conformant parsing leads to a desync if requests pass through multiple HTTP parsers. This flaw allows a remote attacker to perform an HTTP request smuggling attack.

Statement: Red Hat Enterprise Linux 6 was affected but Out of Support Cycle because python-twisted was not listed in Red Hat Enterprise Linux 6 ELS Inclusion List.
https://access.redhat.com/articles/4997301

Affected upstream versions: <= 22.2.0
Fixed upstream versions: twisted-22.4.0
Upstream repository: https://github.com/twisted/twisted
Upstream fix commit: 592217e951363d60e9cd99c5bbfd23d4615043ac
CVE-2022-24805: net-snmp: A buffer overflow in the handling of the INDEX of             NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
Component: net-snmp
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.7 (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H)
Public date: 2022-07-01T00:00:00+00:00

A flaw was found in net-snmp. A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access issue.


Affected upstream versions: <= v5.9.1
Fixed upstream versions: 5.9.2
Upstream repository: https://github.com/net-snmp/net-snmp
Upstream fix commit: ce66eb97c17aa9a48bc079be7b65895266fa6775
CVE-2022-24806: net-snmp: Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously
Component: net-snmp
Severity: Moderate
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-07-01T00:00:00+00:00

A flaw was found in net-snmp. This issue occurs due to improper input validation when simultaneously setting malformed OIDs in the master agent and subagent.


Affected upstream versions: <= v5.9.1
Fixed upstream versions: 5.9.2
Upstream repository: https://github.com/net-snmp/net-snmp
Upstream fix commit: ce66eb97c17aa9a48bc079be7b65895266fa6775
CVE-2022-24807: net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access
Component: net-snmp
Severity: Moderate
CWE: CWE-1320 (Improper Protection for Outbound Error Messages and Alert Signals)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-07-01T00:00:00+00:00

A flaw was found in net-snmp. A malformed OID in a SET request to the SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access issue.


Affected upstream versions: <= v5.9.1
Fixed upstream versions: 5.9.2
Upstream repository: https://github.com/net-snmp/net-snmp
Upstream fix commit: ce66eb97c17aa9a48bc079be7b65895266fa6775
CVE-2022-24808: net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
Component: net-snmp
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-07-01T00:00:00+00:00

A flaw was found in net-snmp. A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference issue.


Affected upstream versions: <= v5.9.1
Fixed upstream versions: 5.9.2
Upstream repository: https://github.com/net-snmp/net-snmp
Upstream fix commit: ce66eb97c17aa9a48bc079be7b65895266fa6775
CVE-2022-24809: net-snmp: A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference.
Component: net-snmp
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-07-01T00:00:00+00:00

A flaw was found in net-snmp. A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference issue.


Affected upstream versions: <= v5.9.1
Fixed upstream versions: 5.9.2
Upstream repository: https://github.com/net-snmp/net-snmp
Upstream fix commit: ce66eb97c17aa9a48bc079be7b65895266fa6775
CVE-2022-24810: net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.
Component: net-snmp
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2022-07-01T00:00:00+00:00

A flaw was found in net-snmp. A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference issue.


Affected upstream versions: <= v5.9.1
Fixed upstream versions: 5.9.2
Upstream repository: https://github.com/net-snmp/net-snmp
Upstream fix commit: ce66eb97c17aa9a48bc079be7b65895266fa6775
CVE-2022-24823: netty: world readable temporary file containing sensitive data
Component: netty
Severity: Moderate
CWE: CWE-379 (Creation of Temporary File in Directory with Insecure Permissions)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Public date: 2022-05-06T00:00:00+00:00

CVE-2021-21290 contains an incomplete fix, and this addresses the issue found in netty. When using multipart decoders in netty, local information disclosure can occur via the local system temporary directory if temporary storing of uploads on the disk is enabled.

Statement: This issue only impacts applications running on Java version 6 and lower. Additionally, this vulnerability impacts code running on Unix-like systems, and very old versions of Mac OSX and Windows as they all share the system temporary directory between all users.

Red Hat Satellite 6 is not affected as is using netty 3.6.7 version which is not impacted by this vulnerability.

Red Hat Fuse 7 is now in Maintenance Support Phase and should be fixed soon. However, Red Hat Fuse Online (Syndesis) does will not contain the fix for this flaw.

Affected upstream versions: <= 4.1.76.Final
Fixed upstream versions: netty-4.1.77.Final
Upstream repository: https://github.com/netty/netty
Upstream fix commit: 185f8b2756a36aaa4f973f1a2a025e7d981823f1