Action not permitted
Modal body text goes here.
CVE-2023-22795
Vulnerability from cvelistv5
Published
2023-02-09 00:00
Modified
2024-08-02 10:20
Severity ?
EPSS score ?
Summary
A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match header. A specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a state of catastrophic backtracking, when on a version of Ruby below 3.2.0. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately.
References
Impacted products
| ▼ | Vendor | Product |
|---|---|---|
| n/a | https://github.com/rails/rails |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T10:20:30.901Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://discuss.rubyonrails.org/t/cve-2023-22795-possible-redos-based-dos-vulnerability-in-action-dispatch/82118"
},
{
"name": "DSA-5372",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.debian.org/security/2023/dsa-5372"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20240202-0010/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "https://github.com/rails/rails",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "6.1.7.1, 7.0.4.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A regular expression based DoS vulnerability in Action Dispatch \u003c6.1.7.1 and \u003c7.0.4.1 related to the If-None-Match header. A specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a state of catastrophic backtracking, when on a version of Ruby below 3.2.0. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "Denial of Service (CWE-400)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-02-02T14:06:23.429831",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://discuss.rubyonrails.org/t/cve-2023-22795-possible-redos-based-dos-vulnerability-in-action-dispatch/82118"
},
{
"name": "DSA-5372",
"tags": [
"vendor-advisory"
],
"url": "https://www.debian.org/security/2023/dsa-5372"
},
{
"url": "https://security.netapp.com/advisory/ntap-20240202-0010/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2023-22795",
"datePublished": "2023-02-09T00:00:00",
"dateReserved": "2023-01-06T00:00:00",
"dateUpdated": "2024-08-02T10:20:30.901Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2023-22795\",\"sourceIdentifier\":\"support@hackerone.com\",\"published\":\"2023-02-09T20:15:11.420\",\"lastModified\":\"2024-02-02T14:15:53.343\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"A regular expression based DoS vulnerability in Action Dispatch \u003c6.1.7.1 and \u003c7.0.4.1 related to the If-None-Match header. A specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a state of catastrophic backtracking, when on a version of Ruby below 3.2.0. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1333\"}]},{\"source\":\"support@hackerone.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.1.7.1\",\"matchCriteriaId\":\"3A4B1AF3-B872-4699-9EFF-BD9B9822B5D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.0.4.1\",\"matchCriteriaId\":\"CDA4E147-AAD7-4EA9-BB6B-8358610FEE9A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.2.0\",\"matchCriteriaId\":\"F841AE5D-60DD-4E3A-854A-9B7B906BF7E7\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}],\"references\":[{\"url\":\"https://discuss.rubyonrails.org/t/cve-2023-22795-possible-redos-based-dos-vulnerability-in-action-dispatch/82118\",\"source\":\"support@hackerone.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240202-0010/\",\"source\":\"support@hackerone.com\"},{\"url\":\"https://www.debian.org/security/2023/dsa-5372\",\"source\":\"support@hackerone.com\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
gsd-2023-22795
Vulnerability from gsd
Modified
2023-01-18 00:00
Details
There is a possible regular expression based DoS vulnerability in Action
Dispatch related to the If-None-Match header. This vulnerability has been
assigned the CVE identifier CVE-2023-22795.
Versions Affected: All
Not affected: None
Fixed Versions: 5.2.8.15 (Rails LTS), 6.1.7.1, 7.0.4.1
# Impact
A specially crafted HTTP If-None-Match header can cause the regular
expression engine to enter a state of catastrophic backtracking, when on a
version of Ruby below 3.2.0. This can cause the process to use large amounts
of CPU and memory, leading to a possible DoS vulnerability All users running
an affected release should either upgrade or use one of the workarounds
immediately.
# Workarounds
We recommend that all users upgrade to one of the FIXED versions. In the
meantime, users can mitigate this vulnerability by using a load balancer or
other device to filter out malicious If-None-Match headers before they reach
the application.
Users on Ruby 3.2.0 or greater are not affected by this vulnerability.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2023-22795",
"id": "GSD-2023-22795",
"references": [
"https://www.suse.com/security/cve/CVE-2023-22795.html",
"https://www.debian.org/security/2023/dsa-5372"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"affected": [
{
"package": {
"ecosystem": "RubyGems",
"name": "actionpack",
"purl": "pkg:gem/actionpack"
}
}
],
"aliases": [
"CVE-2023-22795",
"GHSA-8xww-x3g3-6jcv"
],
"details": "There is a possible regular expression based DoS vulnerability in Action\nDispatch related to the If-None-Match header. This vulnerability has been\nassigned the CVE identifier CVE-2023-22795.\n\nVersions Affected: All\nNot affected: None\nFixed Versions: 5.2.8.15 (Rails LTS), 6.1.7.1, 7.0.4.1\n\n# Impact\n\nA specially crafted HTTP If-None-Match header can cause the regular\nexpression engine to enter a state of catastrophic backtracking, when on a\nversion of Ruby below 3.2.0. This can cause the process to use large amounts\nof CPU and memory, leading to a possible DoS vulnerability All users running\nan affected release should either upgrade or use one of the workarounds\nimmediately.\n\n# Workarounds\n\nWe recommend that all users upgrade to one of the FIXED versions. In the\nmeantime, users can mitigate this vulnerability by using a load balancer or\nother device to filter out malicious If-None-Match headers before they reach\nthe application.\n\nUsers on Ruby 3.2.0 or greater are not affected by this vulnerability.",
"id": "GSD-2023-22795",
"modified": "2023-01-18T00:00:00.000Z",
"published": "2023-01-18T00:00:00.000Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/rails/rails/releases/tag/v7.0.4.1"
}
],
"schema_version": "1.4.0",
"summary": "ReDoS based DoS vulnerability in Action Dispatch"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "support@hackerone.com",
"ID": "CVE-2023-22795",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "https://github.com/rails/rails",
"version": {
"version_data": [
{
"version_value": "6.1.7.1, 7.0.4.1"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A regular expression based DoS vulnerability in Action Dispatch \u003c6.1.7.1 and \u003c7.0.4.1 related to the If-None-Match header. A specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a state of catastrophic backtracking, when on a version of Ruby below 3.2.0. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Denial of Service (CWE-400)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://discuss.rubyonrails.org/t/cve-2023-22795-possible-redos-based-dos-vulnerability-in-action-dispatch/82118",
"refsource": "MISC",
"url": "https://discuss.rubyonrails.org/t/cve-2023-22795-possible-redos-based-dos-vulnerability-in-action-dispatch/82118"
},
{
"name": "DSA-5372",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2023/dsa-5372"
},
{
"name": "https://security.netapp.com/advisory/ntap-20240202-0010/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20240202-0010/"
}
]
}
},
"github.com/rubysec/ruby-advisory-db": {
"cve": "2023-22795",
"date": "2023-01-18",
"description": "There is a possible regular expression based DoS vulnerability in Action\nDispatch related to the If-None-Match header. This vulnerability has been\nassigned the CVE identifier CVE-2023-22795.\n\nVersions Affected: All\nNot affected: None\nFixed Versions: 5.2.8.15 (Rails LTS), 6.1.7.1, 7.0.4.1\n\n# Impact\n\nA specially crafted HTTP If-None-Match header can cause the regular\nexpression engine to enter a state of catastrophic backtracking, when on a\nversion of Ruby below 3.2.0. This can cause the process to use large amounts\nof CPU and memory, leading to a possible DoS vulnerability All users running\nan affected release should either upgrade or use one of the workarounds\nimmediately.\n\n# Workarounds\n\nWe recommend that all users upgrade to one of the FIXED versions. In the\nmeantime, users can mitigate this vulnerability by using a load balancer or\nother device to filter out malicious If-None-Match headers before they reach\nthe application.\n\nUsers on Ruby 3.2.0 or greater are not affected by this vulnerability.",
"gem": "actionpack",
"ghsa": "8xww-x3g3-6jcv",
"patched_versions": [
"~\u003e 5.2.8, \u003e= 5.2.8.15",
"~\u003e 6.1.7, \u003e= 6.1.7.1",
"\u003e= 7.0.4.1"
],
"title": "ReDoS based DoS vulnerability in Action Dispatch",
"url": "https://github.com/rails/rails/releases/tag/v7.0.4.1"
},
"gitlab.com": {
"advisories": [
{
"affected_range": "\u003c6.1.7.1||\u003e=7.0.0 \u003c7.0.4.1",
"affected_versions": "All versions before 6.1.7.1, all versions starting from 7.0.0 before 7.0.4.1",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-1333",
"CWE-937"
],
"date": "2023-03-28",
"description": "There is a possible regular expression based DoS vulnerability in Action Dispatch related to the If-None-Match header. This vulnerability has been assigned the CVE identifier CVE-2023-22795. A specially crafted HTTP `If-None-Match` header can cause the regular expression engine to enter a state of catastrophic backtracking, when on a version of Ruby below 3.2.0. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately.",
"fixed_versions": [
"6.1.7.1",
"7.0.4.1"
],
"identifier": "GMS-2023-56",
"identifiers": [
"CVE-2023-22795",
"GHSA-8xww-x3g3-6jcv",
"GMS-2023-56"
],
"not_impacted": "All versions starting from 6.1.7.1 before 7.0.0, all versions starting from 7.0.4.1",
"package_slug": "gem/actionpack",
"pubdate": "2023-02-09",
"solution": "Upgrade to versions 6.1.7.1, 7.0.4.1 or above.",
"title": "ReDoS based DoS vulnerability in Action Dispatch",
"urls": [
"https://github.com/rails/rails/releases/tag/v7.0.4.1",
"https://github.com/advisories/GHSA-8xww-x3g3-6jcv"
],
"uuid": "28e35361-0e15-4f89-903e-9769326ab222"
},
{
"affected_range": "\u003c6.1.7.1||\u003e=7.0.0 \u003c7.0.4.1",
"affected_versions": "All versions before 6.1.7.1, all versions starting from 7.0.0 before 7.0.4.1",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-1333",
"CWE-937"
],
"date": "2023-04-27",
"description": "A regular expression based DoS vulnerability in Action Dispatch \u003c6.1.7.1 and \u003c7.0.4.1 related to the If-None-Match header. A specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a state of catastrophic backtracking, when on a version of Ruby below 3.2.0. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately.",
"fixed_versions": [
"6.1.7.1",
"7.0.4.1"
],
"identifier": "CVE-2023-22795",
"identifiers": [
"CVE-2023-22795"
],
"not_impacted": "All versions starting from 6.1.7.1 before 7.0.0, all versions starting from 7.0.4.1",
"package_slug": "gem/rails",
"pubdate": "2023-02-09",
"solution": "Upgrade to versions 6.1.7.1, 7.0.4.1 or above.",
"title": "Inefficient Regular Expression Complexity",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2023-22795",
"https://discuss.rubyonrails.org/t/cve-2023-22795-possible-redos-based-dos-vulnerability-in-action-dispatch/82118"
],
"uuid": "996eca5b-8425-49eb-b181-66b61f6a13e1"
}
]
},
"nvd.nist.gov": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3A4B1AF3-B872-4699-9EFF-BD9B9822B5D7",
"versionEndExcluding": "6.1.7.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CDA4E147-AAD7-4EA9-BB6B-8358610FEE9A",
"versionEndExcluding": "7.0.4.1",
"versionStartIncluding": "7.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F841AE5D-60DD-4E3A-854A-9B7B906BF7E7",
"versionEndExcluding": "3.2.0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A regular expression based DoS vulnerability in Action Dispatch \u003c6.1.7.1 and \u003c7.0.4.1 related to the If-None-Match header. A specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a state of catastrophic backtracking, when on a version of Ruby below 3.2.0. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately."
}
],
"id": "CVE-2023-22795",
"lastModified": "2024-02-02T14:15:53.343",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2023-02-09T20:15:11.420",
"references": [
{
"source": "support@hackerone.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://discuss.rubyonrails.org/t/cve-2023-22795-possible-redos-based-dos-vulnerability-in-action-dispatch/82118"
},
{
"source": "support@hackerone.com",
"url": "https://security.netapp.com/advisory/ntap-20240202-0010/"
},
{
"source": "support@hackerone.com",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2023/dsa-5372"
}
],
"sourceIdentifier": "support@hackerone.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-1333"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-400"
}
],
"source": "support@hackerone.com",
"type": "Secondary"
}
]
}
}
}
}
wid-sec-w-2023-2101
Vulnerability from csaf_certbund
Published
2023-08-20 22:00
Modified
2023-08-20 22:00
Summary
genua genucenter: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
genucenter bietet eine zentrale und rollenbasierte Administration der Lösungen von genua.
Angriff
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in genua genucenter ausnutzen, um Informationen offenzulegen, Dateien zu manipulieren, um Cross-Site Scripting Angriffe durchzuführen oder um einen nicht näher spezifizierten Angriff durchzuführen.
Betroffene Betriebssysteme
- Hardware Appliance
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "genucenter bietet eine zentrale und rollenbasierte Administration der L\u00f6sungen von genua.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in genua genucenter ausnutzen, um Informationen offenzulegen, Dateien zu manipulieren, um Cross-Site Scripting Angriffe durchzuf\u00fchren oder um einen nicht n\u00e4her spezifizierten Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Hardware Appliance",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-2101 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2101.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-2101 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2101"
},
{
"category": "external",
"summary": "genua Kundencenter vom 2023-08-20",
"url": "https://kunde.genua.de/nc/suche/view/neuer-patch-genucenter-80p6-verfuegbar.html?tx_genusupport_content%5Bidentity%5D=0\u0026tx_genusupport_content%5BsearchTerm%5D=\u0026tx_genusupport_content%5BforcePath%5D=\u0026tx_genusupport_content%5Baction%5D=genuSupportSearch\u0026tx_genusupport_content%5Bcontroller%5D=Content"
}
],
"source_lang": "en-US",
"title": "genua genucenter: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-08-20T22:00:00.000+00:00",
"generator": {
"date": "2024-02-15T17:40:59.147+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2023-2101",
"initial_release_date": "2023-08-20T22:00:00.000+00:00",
"revision_history": [
{
"date": "2023-08-20T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "genua genucenter \u003c 8.0 patch 6",
"product": {
"name": "genua genucenter \u003c 8.0 patch 6",
"product_id": "T029421",
"product_identification_helper": {
"cpe": "cpe:/h:genua:genucenter:8.0:patch_6"
}
}
}
],
"category": "vendor",
"name": "genua"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-32001",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-32001"
},
{
"cve": "CVE-2023-29469",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-29469"
},
{
"cve": "CVE-2023-28484",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-28484"
},
{
"cve": "CVE-2023-28362",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-28362"
},
{
"cve": "CVE-2023-27539",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-27539"
},
{
"cve": "CVE-2023-27530",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-27530"
},
{
"cve": "CVE-2023-27320",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-27320"
},
{
"cve": "CVE-2023-23916",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-23916"
},
{
"cve": "CVE-2023-23915",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-23915"
},
{
"cve": "CVE-2023-23914",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-23914"
},
{
"cve": "CVE-2023-23913",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-23913"
},
{
"cve": "CVE-2023-22799",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-22799"
},
{
"cve": "CVE-2023-22796",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-22796"
},
{
"cve": "CVE-2023-22795",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-22795"
},
{
"cve": "CVE-2023-22794",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-22794"
},
{
"cve": "CVE-2023-22792",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-22792"
},
{
"cve": "CVE-2022-44566",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2022-44566"
},
{
"cve": "CVE-2021-28092",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2021-28092"
}
]
}
wid-sec-w-2023-0114
Vulnerability from csaf_certbund
Published
2023-01-17 23:00
Modified
2023-11-08 23:00
Summary
Ruby on Rails: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Ruby on Rails ist ein in der Programmiersprache Ruby geschriebenes und quelloffenes Web Application Framework.
Angriff
Ein entfernter Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren und Sicherheitsmaßnahmen zu umgehen.
Betroffene Betriebssysteme
- UNIX
- Linux
- Windows
- Sonstiges
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Ruby on Rails ist ein in der Programmiersprache Ruby geschriebenes und quelloffenes Web Application Framework.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren, Daten zu manipulieren und Sicherheitsma\u00dfnahmen zu umgehen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- UNIX\n- Linux\n- Windows\n- Sonstiges",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-0114 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0114.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-0114 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0114"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:6818 vom 2023-11-09",
"url": "https://access.redhat.com/errata/RHSA-2023:6818"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:4341 vom 2023-08-02",
"url": "https://access.redhat.com/errata/RHSA-2023:4341"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5372 vom 2023-03-13",
"url": "https://lists.debian.org/debian-security-announce/2023/msg00061.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0612-1 vom 2023-03-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/013967.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0587-1 vom 2023-03-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/013954.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0518-1 vom 2023-02-24",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013881.html"
},
{
"category": "external",
"summary": "Rails Versions 7.0.4.1, 6.1.7.1, and 6.0.6.1 have been released! vom 2023-01-17",
"url": "https://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0275-1 vom 2023-02-06",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013632.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0442-1 vom 2023-02-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013835.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0444-1 vom 2023-02-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013832.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0492-1 vom 2023-02-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013874.html"
}
],
"source_lang": "en-US",
"title": "Ruby on Rails: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-11-08T23:00:00.000+00:00",
"generator": {
"date": "2024-02-15T17:10:08.922+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2023-0114",
"initial_release_date": "2023-01-17T23:00:00.000+00:00",
"revision_history": [
{
"date": "2023-01-17T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2023-02-06T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-02-19T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-02-23T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-02-26T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-03-01T23:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-03-05T23:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-03-12T23:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2023-08-02T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-11-08T23:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "10"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Open Source Ruby on Rails \u003c 7.0.4.1",
"product": {
"name": "Open Source Ruby on Rails \u003c 7.0.4.1",
"product_id": "T025950",
"product_identification_helper": {
"cpe": "cpe:/a:rubyonrails:ruby_on_rails:7.0.4.1"
}
}
},
{
"category": "product_name",
"name": "Open Source Ruby on Rails \u003c 6.1.7.1",
"product": {
"name": "Open Source Ruby on Rails \u003c 6.1.7.1",
"product_id": "T025951",
"product_identification_helper": {
"cpe": "cpe:/a:rubyonrails:ruby_on_rails:6.1.7.1"
}
}
},
{
"category": "product_name",
"name": "Open Source Ruby on Rails \u003c 6.0.6.1",
"product": {
"name": "Open Source Ruby on Rails \u003c 6.0.6.1",
"product_id": "T025952",
"product_identification_helper": {
"cpe": "cpe:/a:rubyonrails:ruby_on_rails:6.0.6.1"
}
}
}
],
"category": "product_name",
"name": "Ruby on Rails"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-44566",
"notes": [
{
"category": "description",
"text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646"
]
},
"release_date": "2023-01-17T23:00:00Z",
"title": "CVE-2022-44566"
},
{
"cve": "CVE-2023-22792",
"notes": [
{
"category": "description",
"text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646"
]
},
"release_date": "2023-01-17T23:00:00Z",
"title": "CVE-2023-22792"
},
{
"cve": "CVE-2023-22795",
"notes": [
{
"category": "description",
"text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646"
]
},
"release_date": "2023-01-17T23:00:00Z",
"title": "CVE-2023-22795"
},
{
"cve": "CVE-2023-22796",
"notes": [
{
"category": "description",
"text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646"
]
},
"release_date": "2023-01-17T23:00:00Z",
"title": "CVE-2023-22796"
},
{
"cve": "CVE-2023-22794",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Ruby on Rails. Der Fehler besteht, weil die Implementierung des Kommentar-Escapings unzureichend ist, was zu einer SQL-Injection f\u00fchrt. Ein entfernter Angreifer kann diese Schwachstelle ausnutzen, um Daten zu manipulieren."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646"
]
},
"release_date": "2023-01-17T23:00:00Z",
"title": "CVE-2023-22794"
},
{
"cve": "CVE-2023-22797",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Ruby on Rails. Der Fehler besteht aufgrund eines offenen Redirects bei Verwendung des \"redirect_to\"-Helpers mit nicht vertrauensw\u00fcrdigen Benutzereingaben. Ein entfernter Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646"
]
},
"release_date": "2023-01-17T23:00:00Z",
"title": "CVE-2023-22797"
}
]
}
rhsa-2023_6818
Vulnerability from csaf_redhat
Published
2023-11-08 14:26
Modified
2024-11-21 21:50
Summary
Red Hat Security Advisory: Satellite 6.14 security and bug fix update
Notes
Topic
An update is now available for Red Hat Satellite 6.14. The release contains a
new version of Satellite and important security fixes for various components.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat Satellite is a systems management tool for Linux-based
infrastructure. It allows for provisioning, remote management, and
monitoring of multiple Linux deployments with a single centralized tool.
Security Fix(es):
* golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)
* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
* GitPython: Insecure non-multi options in clone and clone_from is not blocked (CVE-2023-40267)
* kubeclient: kubeconfig parsing error can lead to MITM attacks (CVE-2022-0759)
* foreman: OS command injection via ct_command and fcct_command (CVE-2022-3874)
* ruby-git: code injection vulnerability (CVE-2022-46648)
* ruby-git: code injection vulnerability (CVE-2022-47318)
* Foreman: Arbitrary code execution through templates (CVE-2023-0118)
* rubygem-activerecord: SQL Injection (CVE-2023-22794)
* openssl: c_rehash script allows command injection (CVE-2022-1292)
* openssl: the c_rehash script allows command injection (CVE-2022-2068)
* Pulp:Tokens stored in plaintext (CVE-2022-3644)
* satellite: Blind SSRF via Referer header (CVE-2022-4130)
* python-future: remote attackers can cause denial of service via crafted Set-Cookie header from malicious web server (CVE-2022-40899)
* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
* rubygem-activerecord: Denial of Service (CVE-2022-44566)
* rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44570)
* rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44571)
* rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44572)
* Foreman: Stored cross-site scripting in host tab (CVE-2023-0119)
* puppet: Puppet Server ReDoS (CVE-2023-1894)
* rubygem-actionpack: Denial of Service in Action Dispatch (CVE-2023-22792)
* rubygem-actionpack: Denial of Service in Action Dispatch (CVE-2023-22795)
* rubygem-activesupport: Regular Expression Denial of Service (CVE-2023-22796)
* rubygem-globalid: ReDoS vulnerability (CVE-2023-22799)
* rubygem-rack: Denial of service in Multipart MIME parsing (CVE-2023-27530)
* rubygem-rack: denial of service in header parsing (CVE-2023-27539)
* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)
* sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) (CVE-2023-30608)
* python-django: Potential bypass of validation when uploading multiple files using one form field (CVE-2023-31047)
* python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)
* python-django: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator (CVE-2023-36053)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
This update also fixes several bugs and adds various enhancements. Documentation for these changes is available from the Release Notes document linked to in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.