Action not permitted
Modal body text goes here.
cve-2022-44566
Vulnerability from cvelistv5
Published
2023-02-09 00:00
Modified
2024-08-03 13:54
Severity ?
EPSS score ?
Summary
A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| support@hackerone.com | https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html | Exploit, Mitigation, Third Party Advisory | |
| support@hackerone.com | https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119 | Patch, Vendor Advisory |
Impacted products
| ▼ | Vendor | Product |
|---|---|---|
| n/a | https://github.com/rails/rails |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T13:54:03.838Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119"
},
{
"tags": [
"x_transferred"
],
"url": "https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "https://github.com/rails/rails",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "7.0.4.1, 6.1.7.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A denial of service vulnerability present in ActiveRecord\u0027s PostgreSQL adapter \u003c7.0.4.1 and \u003c6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "Denial of Service (CWE-400)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-02-09T00:00:00",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119"
},
{
"url": "https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2022-44566",
"datePublished": "2023-02-09T00:00:00",
"dateReserved": "2022-11-01T00:00:00",
"dateUpdated": "2024-08-03T13:54:03.838Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2022-44566\",\"sourceIdentifier\":\"support@hackerone.com\",\"published\":\"2023-02-09T20:15:11.017\",\"lastModified\":\"2023-06-23T18:29:30.760\",\"vulnStatus\":\"Analyzed\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"A denial of service vulnerability present in ActiveRecord\u0027s PostgreSQL adapter \u003c7.0.4.1 and \u003c6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]},{\"source\":\"support@hackerone.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:activerecord_project:activerecord:*:*:*:*:*:ruby:*:*\",\"versionEndExcluding\":\"6.1.7.1\",\"matchCriteriaId\":\"959FB9CC-9272-4B41-A05B-4A65C2071899\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:activerecord_project:activerecord:*:*:*:*:*:ruby:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.0.4.1\",\"matchCriteriaId\":\"EDE689E3-57CB-4121-9EE3-1857079325E6\"}]}]}],\"references\":[{\"url\":\"https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html\",\"source\":\"support@hackerone.com\",\"tags\":[\"Exploit\",\"Mitigation\",\"Third Party Advisory\"]},{\"url\":\"https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119\",\"source\":\"support@hackerone.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}"
}
}
gsd-2022-44566
Vulnerability from gsd
Modified
2023-01-18 00:00
Details
There is a potential denial of service vulnerability present in
ActiveRecord’s PostgreSQL adapter.
This has been assigned the CVE identifier CVE-2022-44566.
Versions Affected: All.
Not affected: None.
Fixed Versions: 5.2.8.15 (Rails LTS), 6.1.7.1, 7.0.4.1
# Impact
In ActiveRecord <7.0.4.1 and <6.1.7.1, when a value outside the range for a
64bit signed integer is provided to the PostgreSQL connection adapter, it
will treat the target column type as numeric. Comparing integer values
against numeric values can result in a slow sequential scan resulting in
potential Denial of Service.
# Workarounds
Ensure that user supplied input which is provided to ActiveRecord clauses do
not contain integers wider than a signed 64bit representation or floats.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2022-44566",
"description": "A denial of service vulnerability present in ActiveRecord\u0027s PostgreSQL adapter \u003c7.0.4.1 and \u003c6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.",
"id": "GSD-2022-44566",
"references": [
"https://www.suse.com/security/cve/CVE-2022-44566.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"affected": [
{
"package": {
"ecosystem": "RubyGems",
"name": "activerecord",
"purl": "pkg:gem/activerecord"
}
}
],
"aliases": [
"CVE-2022-44566",
"GHSA-579w-22j4-4749"
],
"details": "There is a potential denial of service vulnerability present in\nActiveRecord\u2019s PostgreSQL adapter.\n\nThis has been assigned the CVE identifier CVE-2022-44566.\n\nVersions Affected: All.\nNot affected: None.\nFixed Versions: 5.2.8.15 (Rails LTS), 6.1.7.1, 7.0.4.1\n\n# Impact\n\nIn ActiveRecord \u003c7.0.4.1 and \u003c6.1.7.1, when a value outside the range for a\n64bit signed integer is provided to the PostgreSQL connection adapter, it\nwill treat the target column type as numeric. Comparing integer values\nagainst numeric values can result in a slow sequential scan resulting in\npotential Denial of Service.\n\n# Workarounds\n\nEnsure that user supplied input which is provided to ActiveRecord clauses do\nnot contain integers wider than a signed 64bit representation or floats.\n",
"id": "GSD-2022-44566",
"modified": "2023-01-18T00:00:00.000Z",
"published": "2023-01-18T00:00:00.000Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/rails/rails/releases/tag/v7.0.4.1"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": 7.5,
"type": "CVSS_V3"
}
],
"summary": "Denial of Service Vulnerability in ActiveRecord\u2019s PostgreSQL adapter"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "support@hackerone.com",
"ID": "CVE-2022-44566",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "https://github.com/rails/rails",
"version": {
"version_data": [
{
"version_value": "7.0.4.1, 6.1.7.1"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A denial of service vulnerability present in ActiveRecord\u0027s PostgreSQL adapter \u003c7.0.4.1 and \u003c6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Denial of Service (CWE-400)"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119",
"refsource": "MISC",
"url": "https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119"
},
{
"name": "https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html",
"refsource": "MISC",
"url": "https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html"
}
]
}
},
"github.com/rubysec/ruby-advisory-db": {
"cve": "2022-44566",
"cvss_v3": 7.5,
"date": "2023-01-18",
"description": "There is a potential denial of service vulnerability present in\nActiveRecord\u2019s PostgreSQL adapter.\n\nThis has been assigned the CVE identifier CVE-2022-44566.\n\nVersions Affected: All.\nNot affected: None.\nFixed Versions: 5.2.8.15 (Rails LTS), 6.1.7.1, 7.0.4.1\n\n# Impact\n\nIn ActiveRecord \u003c7.0.4.1 and \u003c6.1.7.1, when a value outside the range for a\n64bit signed integer is provided to the PostgreSQL connection adapter, it\nwill treat the target column type as numeric. Comparing integer values\nagainst numeric values can result in a slow sequential scan resulting in\npotential Denial of Service.\n\n# Workarounds\n\nEnsure that user supplied input which is provided to ActiveRecord clauses do\nnot contain integers wider than a signed 64bit representation or floats.\n",
"gem": "activerecord",
"ghsa": "579w-22j4-4749",
"patched_versions": [
"~\u003e 5.2.8, \u003e= 5.2.8.15",
"~\u003e 6.1.7, \u003e= 6.1.7.1",
"\u003e= 7.0.4.1"
],
"title": "Denial of Service Vulnerability in ActiveRecord\u2019s PostgreSQL adapter",
"url": "https://github.com/rails/rails/releases/tag/v7.0.4.1"
},
"gitlab.com": {
"advisories": [
{
"affected_range": "\u003c6.1.7.1||\u003e=7.0.0 \u003c7.0.4.1",
"affected_versions": "All versions before 6.1.7.1, all versions starting from 7.0.0 before 7.0.4.1",
"cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"cwe_ids": [
"CWE-1035",
"CWE-937"
],
"date": "2023-06-23",
"description": "A denial of service vulnerability present in ActiveRecord\u0027s PostgreSQL adapter \u003c7.0.4.1 and \u003c6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.",
"fixed_versions": [
"6.1.7.1",
"7.0.4.1"
],
"identifier": "CVE-2022-44566",
"identifiers": [
"CVE-2022-44566",
"GHSA-579w-22j4-4749",
"GMS-2023-59"
],
"not_impacted": "All versions starting from 6.1.7.1 before 7.0.0, all versions starting from 7.0.4.1",
"package_slug": "gem/activerecord",
"pubdate": "2023-02-09",
"solution": "Upgrade to versions 6.1.7.1, 7.0.4.1 or above.",
"title": "Uncontrolled Resource Consumption",
"urls": [
"https://nvd.nist.gov/vuln/detail/CVE-2022-44566",
"https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html",
"https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119",
"https://github.com/rails/rails/releases/tag/v7.0.4.1",
"https://github.com/advisories/GHSA-579w-22j4-4749"
],
"uuid": "bcb6223f-da39-4dd7-a5e9-655a0a357ac6"
},
{
"affected_range": "\u003c0",
"affected_versions": "All versions before 6.1.7.1, all versions starting from 7.0.0 before 7.0.4.1",
"cwe_ids": [
"CWE-1035",
"CWE-937"
],
"date": "2023-01-18",
"description": "There is a potential denial of service vulnerability present in ActiveRecord\u2019s PostgreSQL adapter. In ActiveRecord \u003c7.0.4.1 and \u003c6.1.7.1, when a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.",
"fixed_versions": [
"6.1.7.1",
"7.0.4.1"
],
"identifier": "GMS-2023-59",
"identifiers": [
"GHSA-579w-22j4-4749",
"GMS-2023-59",
"CVE-2022-44566"
],
"not_impacted": "All versions starting from 6.1.7.1 before 7.0.0, all versions starting from 7.0.4.1",
"package_slug": "gem/activerecord",
"pubdate": "2023-01-18",
"solution": "Upgrade to versions 6.1.7.1, 7.0.4.1 or above.",
"title": "Duplicate of ./gem/activerecord/CVE-2022-44566.yml",
"urls": [
"https://github.com/rails/rails/releases/tag/v7.0.4.1",
"https://github.com/advisories/GHSA-579w-22j4-4749"
],
"uuid": "c16d086a-3f17-4d62-9499-6db6f8352bca"
}
]
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:activerecord_project:activerecord:*:*:*:*:*:ruby:*:*",
"cpe_name": [],
"versionEndExcluding": "7.0.4.1",
"versionStartIncluding": "7.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:activerecord_project:activerecord:*:*:*:*:*:ruby:*:*",
"cpe_name": [],
"versionEndExcluding": "6.1.7.1",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "support@hackerone.com",
"ID": "CVE-2022-44566"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "A denial of service vulnerability present in ActiveRecord\u0027s PostgreSQL adapter \u003c7.0.4.1 and \u003c6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html",
"refsource": "MISC",
"tags": [
"Exploit",
"Mitigation",
"Third Party Advisory"
],
"url": "https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html"
},
{
"name": "https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119",
"refsource": "MISC",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119"
}
]
}
},
"impact": {
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
},
"lastModifiedDate": "2023-06-23T18:29Z",
"publishedDate": "2023-02-09T20:15Z"
}
}
}
ghsa-579w-22j4-4749
Vulnerability from github
Published
2023-01-18 18:21
Modified
2023-08-18 21:11
Severity ?
Summary
Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
Details
There is a potential denial of service vulnerability present in ActiveRecord’s PostgreSQL adapter.
This has been assigned the CVE identifier CVE-2022-44566.
Versions Affected: All. Not affected: None. Fixed Versions: 5.2.8.15 (Rails LTS, which is a paid service and not part of the rubygem), 6.1.7.1, 7.0.4.1
Impact: In ActiveRecord <7.0.4.1 and <6.1.7.1, when a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service. Releases
The fixed releases are available at the normal locations. Workarounds
Ensure that user supplied input which is provided to ActiveRecord clauses do not contain integers wider than a signed 64bit representation or floats. Patches
To aid users who aren’t able to upgrade immediately we have provided patches for the supported release series in accordance with our maintenance policy 1 regarding security issues. They are in git-am format and consist of a single changeset.
6-1-Added-integer-width-check-to-PostgreSQL-Quoting.patch - Patch for 6.1 series
7-0-Added-integer-width-check-to-PostgreSQL-Quoting.patch - Patch for 7.0 series
{
"affected": [
{
"package": {
"ecosystem": "RubyGems",
"name": "activerecord"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.1.7.1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "RubyGems",
"name": "activerecord"
},
"ranges": [
{
"events": [
{
"introduced": "7.0.0"
},
{
"fixed": "7.0.4.1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2022-44566"
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"github_reviewed": true,
"github_reviewed_at": "2023-01-18T18:21:12Z",
"nvd_published_at": "2023-02-09T20:15:00Z",
"severity": "HIGH"
},
"details": "There is a potential denial of service vulnerability present in ActiveRecord\u2019s PostgreSQL adapter.\n\nThis has been assigned the CVE identifier CVE-2022-44566.\n\nVersions Affected: All. Not affected: None. Fixed Versions: 5.2.8.15 (Rails LTS, which is a paid service and not part of the rubygem), 6.1.7.1, 7.0.4.1\n\nImpact:\nIn ActiveRecord \u003c7.0.4.1 and \u003c6.1.7.1, when a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.\nReleases\n\nThe fixed releases are available at the normal locations.\nWorkarounds\n\nEnsure that user supplied input which is provided to ActiveRecord clauses do not contain integers wider than a signed 64bit representation or floats.\nPatches\n\nTo aid users who aren\u2019t able to upgrade immediately we have provided patches for the supported release series in accordance with our maintenance policy 1 regarding security issues. They are in git-am format and consist of a single changeset.\n\n 6-1-Added-integer-width-check-to-PostgreSQL-Quoting.patch - Patch for 6.1 series\n 7-0-Added-integer-width-check-to-PostgreSQL-Quoting.patch - Patch for 7.0 series\n",
"id": "GHSA-579w-22j4-4749",
"modified": "2023-08-18T21:11:49Z",
"published": "2023-01-18T18:21:12Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-44566"
},
{
"type": "WEB",
"url": "https://github.com/rails/rails/commit/4f44aa9d514e701ada92b5cf08beccf566eeaebf"
},
{
"type": "WEB",
"url": "https://github.com/rails/rails/commit/82bcdc011e2ff674e7dd8fd8cee3a831c908d29b"
},
{
"type": "WEB",
"url": "https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html"
},
{
"type": "WEB",
"url": "https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119"
},
{
"type": "PACKAGE",
"url": "https://github.com/rails/rails"
},
{
"type": "WEB",
"url": "https://github.com/rails/rails/releases/tag/v6.1.7.1"
},
{
"type": "WEB",
"url": "https://github.com/rails/rails/releases/tag/v7.0.4.1"
},
{
"type": "WEB",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2022-44566.yml"
},
{
"type": "WEB",
"url": "https://makandracards.com/railslts/508019-rails-5-2-lts-changelog#section-jan-20th-2023-rails-version-5-2-8-15"
},
{
"type": "WEB",
"url": "https://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
],
"summary": "Denial of Service Vulnerability in ActiveRecord\u0027s PostgreSQL adapter"
}
wid-sec-w-2023-0114
Vulnerability from csaf_certbund
Published
2023-01-17 23:00
Modified
2023-11-08 23:00
Summary
Ruby on Rails: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Ruby on Rails ist ein in der Programmiersprache Ruby geschriebenes und quelloffenes Web Application Framework.
Angriff
Ein entfernter Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren und Sicherheitsmaßnahmen zu umgehen.
Betroffene Betriebssysteme
- UNIX
- Linux
- Windows
- Sonstiges
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Ruby on Rails ist ein in der Programmiersprache Ruby geschriebenes und quelloffenes Web Application Framework.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren, Daten zu manipulieren und Sicherheitsma\u00dfnahmen zu umgehen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- UNIX\n- Linux\n- Windows\n- Sonstiges",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-0114 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0114.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-0114 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0114"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:6818 vom 2023-11-09",
"url": "https://access.redhat.com/errata/RHSA-2023:6818"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:4341 vom 2023-08-02",
"url": "https://access.redhat.com/errata/RHSA-2023:4341"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5372 vom 2023-03-13",
"url": "https://lists.debian.org/debian-security-announce/2023/msg00061.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0612-1 vom 2023-03-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/013967.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0587-1 vom 2023-03-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/013954.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0518-1 vom 2023-02-24",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013881.html"
},
{
"category": "external",
"summary": "Rails Versions 7.0.4.1, 6.1.7.1, and 6.0.6.1 have been released! vom 2023-01-17",
"url": "https://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0275-1 vom 2023-02-06",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013632.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0442-1 vom 2023-02-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013835.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0444-1 vom 2023-02-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013832.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:0492-1 vom 2023-02-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013874.html"
}
],
"source_lang": "en-US",
"title": "Ruby on Rails: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-11-08T23:00:00.000+00:00",
"generator": {
"date": "2024-02-15T17:10:08.922+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2023-0114",
"initial_release_date": "2023-01-17T23:00:00.000+00:00",
"revision_history": [
{
"date": "2023-01-17T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2023-02-06T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-02-19T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-02-23T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-02-26T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-03-01T23:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-03-05T23:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-03-12T23:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2023-08-02T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-11-08T23:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "10"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Open Source Ruby on Rails \u003c 7.0.4.1",
"product": {
"name": "Open Source Ruby on Rails \u003c 7.0.4.1",
"product_id": "T025950",
"product_identification_helper": {
"cpe": "cpe:/a:rubyonrails:ruby_on_rails:7.0.4.1"
}
}
},
{
"category": "product_name",
"name": "Open Source Ruby on Rails \u003c 6.1.7.1",
"product": {
"name": "Open Source Ruby on Rails \u003c 6.1.7.1",
"product_id": "T025951",
"product_identification_helper": {
"cpe": "cpe:/a:rubyonrails:ruby_on_rails:6.1.7.1"
}
}
},
{
"category": "product_name",
"name": "Open Source Ruby on Rails \u003c 6.0.6.1",
"product": {
"name": "Open Source Ruby on Rails \u003c 6.0.6.1",
"product_id": "T025952",
"product_identification_helper": {
"cpe": "cpe:/a:rubyonrails:ruby_on_rails:6.0.6.1"
}
}
}
],
"category": "product_name",
"name": "Ruby on Rails"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-44566",
"notes": [
{
"category": "description",
"text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646"
]
},
"release_date": "2023-01-17T23:00:00Z",
"title": "CVE-2022-44566"
},
{
"cve": "CVE-2023-22792",
"notes": [
{
"category": "description",
"text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646"
]
},
"release_date": "2023-01-17T23:00:00Z",
"title": "CVE-2023-22792"
},
{
"cve": "CVE-2023-22795",
"notes": [
{
"category": "description",
"text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646"
]
},
"release_date": "2023-01-17T23:00:00Z",
"title": "CVE-2023-22795"
},
{
"cve": "CVE-2023-22796",
"notes": [
{
"category": "description",
"text": "In Ruby on Rails existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten ActiveRecords PostgreSQL, Action Dispatch, ActiveRecord comments und Active Support\u0027s underscore. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand und m\u00f6glicherweise einen ReDoS-basierten Denial-of-Services auszul\u00f6sen."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646"
]
},
"release_date": "2023-01-17T23:00:00Z",
"title": "CVE-2023-22796"
},
{
"cve": "CVE-2023-22794",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Ruby on Rails. Der Fehler besteht, weil die Implementierung des Kommentar-Escapings unzureichend ist, was zu einer SQL-Injection f\u00fchrt. Ein entfernter Angreifer kann diese Schwachstelle ausnutzen, um Daten zu manipulieren."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646"
]
},
"release_date": "2023-01-17T23:00:00Z",
"title": "CVE-2023-22794"
},
{
"cve": "CVE-2023-22797",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in Ruby on Rails. Der Fehler besteht aufgrund eines offenen Redirects bei Verwendung des \"redirect_to\"-Helpers mit nicht vertrauensw\u00fcrdigen Benutzereingaben. Ein entfernter Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646"
]
},
"release_date": "2023-01-17T23:00:00Z",
"title": "CVE-2023-22797"
}
]
}
wid-sec-w-2023-2101
Vulnerability from csaf_certbund
Published
2023-08-20 22:00
Modified
2023-08-20 22:00
Summary
genua genucenter: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
genucenter bietet eine zentrale und rollenbasierte Administration der Lösungen von genua.
Angriff
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in genua genucenter ausnutzen, um Informationen offenzulegen, Dateien zu manipulieren, um Cross-Site Scripting Angriffe durchzuführen oder um einen nicht näher spezifizierten Angriff durchzuführen.
Betroffene Betriebssysteme
- Hardware Appliance
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "genucenter bietet eine zentrale und rollenbasierte Administration der L\u00f6sungen von genua.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in genua genucenter ausnutzen, um Informationen offenzulegen, Dateien zu manipulieren, um Cross-Site Scripting Angriffe durchzuf\u00fchren oder um einen nicht n\u00e4her spezifizierten Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Hardware Appliance",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-2101 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2101.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-2101 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2101"
},
{
"category": "external",
"summary": "genua Kundencenter vom 2023-08-20",
"url": "https://kunde.genua.de/nc/suche/view/neuer-patch-genucenter-80p6-verfuegbar.html?tx_genusupport_content%5Bidentity%5D=0\u0026tx_genusupport_content%5BsearchTerm%5D=\u0026tx_genusupport_content%5BforcePath%5D=\u0026tx_genusupport_content%5Baction%5D=genuSupportSearch\u0026tx_genusupport_content%5Bcontroller%5D=Content"
}
],
"source_lang": "en-US",
"title": "genua genucenter: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-08-20T22:00:00.000+00:00",
"generator": {
"date": "2024-02-15T17:40:59.147+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2023-2101",
"initial_release_date": "2023-08-20T22:00:00.000+00:00",
"revision_history": [
{
"date": "2023-08-20T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "genua genucenter \u003c 8.0 patch 6",
"product": {
"name": "genua genucenter \u003c 8.0 patch 6",
"product_id": "T029421",
"product_identification_helper": {
"cpe": "cpe:/h:genua:genucenter:8.0:patch_6"
}
}
}
],
"category": "vendor",
"name": "genua"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-32001",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-32001"
},
{
"cve": "CVE-2023-29469",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-29469"
},
{
"cve": "CVE-2023-28484",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-28484"
},
{
"cve": "CVE-2023-28362",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-28362"
},
{
"cve": "CVE-2023-27539",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-27539"
},
{
"cve": "CVE-2023-27530",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-27530"
},
{
"cve": "CVE-2023-27320",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-27320"
},
{
"cve": "CVE-2023-23916",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-23916"
},
{
"cve": "CVE-2023-23915",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-23915"
},
{
"cve": "CVE-2023-23914",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-23914"
},
{
"cve": "CVE-2023-23913",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-23913"
},
{
"cve": "CVE-2023-22799",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-22799"
},
{
"cve": "CVE-2023-22796",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-22796"
},
{
"cve": "CVE-2023-22795",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-22795"
},
{
"cve": "CVE-2023-22794",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-22794"
},
{
"cve": "CVE-2023-22792",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2023-22792"
},
{
"cve": "CVE-2022-44566",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2022-44566"
},
{
"cve": "CVE-2021-28092",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in genua genucenter und in davon genutzten Komponenten von Drittanbietern (curl, libxml, sudo und Ruby). Durch manipulierte Anfragen an das System kann ein Angreifer dadurch Informationen offenlegen, Dateien manipulieren, Cross-Site Scripting Angriffe durchf\u00fchren oder weitere nicht spezifizierte Auswirkungen erzielen."
}
],
"release_date": "2023-08-20T22:00:00Z",
"title": "CVE-2021-28092"
}
]
}
rhsa-2023_6818
Vulnerability from csaf_redhat
Published
2023-11-08 14:26
Modified
2024-11-21 21:50
Summary
Red Hat Security Advisory: Satellite 6.14 security and bug fix update
Notes
Topic
An update is now available for Red Hat Satellite 6.14. The release contains a
new version of Satellite and important security fixes for various components.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat Satellite is a systems management tool for Linux-based
infrastructure. It allows for provisioning, remote management, and
monitoring of multiple Linux deployments with a single centralized tool.
Security Fix(es):
* golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) (CVE-2023-39325)
* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
* GitPython: Insecure non-multi options in clone and clone_from is not blocked (CVE-2023-40267)
* kubeclient: kubeconfig parsing error can lead to MITM attacks (CVE-2022-0759)
* foreman: OS command injection via ct_command and fcct_command (CVE-2022-3874)
* ruby-git: code injection vulnerability (CVE-2022-46648)
* ruby-git: code injection vulnerability (CVE-2022-47318)
* Foreman: Arbitrary code execution through templates (CVE-2023-0118)
* rubygem-activerecord: SQL Injection (CVE-2023-22794)
* openssl: c_rehash script allows command injection (CVE-2022-1292)
* openssl: the c_rehash script allows command injection (CVE-2022-2068)
* Pulp:Tokens stored in plaintext (CVE-2022-3644)
* satellite: Blind SSRF via Referer header (CVE-2022-4130)
* python-future: remote attackers can cause denial of service via crafted Set-Cookie header from malicious web server (CVE-2022-40899)
* golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)
* rubygem-activerecord: Denial of Service (CVE-2022-44566)
* rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44570)
* rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44571)
* rubygem-rack: denial of service in Content-Disposition parsing (CVE-2022-44572)
* Foreman: Stored cross-site scripting in host tab (CVE-2023-0119)
* puppet: Puppet Server ReDoS (CVE-2023-1894)
* rubygem-actionpack: Denial of Service in Action Dispatch (CVE-2023-22792)
* rubygem-actionpack: Denial of Service in Action Dispatch (CVE-2023-22795)
* rubygem-activesupport: Regular Expression Denial of Service (CVE-2023-22796)
* rubygem-globalid: ReDoS vulnerability (CVE-2023-22799)
* rubygem-rack: Denial of service in Multipart MIME parsing (CVE-2023-27530)
* rubygem-rack: denial of service in header parsing (CVE-2023-27539)
* golang: net/http: insufficient sanitization of Host header (CVE-2023-29406)
* sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) (CVE-2023-30608)
* python-django: Potential bypass of validation when uploading multiple files using one form field (CVE-2023-31047)
* python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)
* python-django: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator (CVE-2023-36053)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
This update also fixes several bugs and adds various enhancements. Documentation for these changes is available from the Release Notes document linked to in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.