Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-1722: A flaw was found in IPA. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability. 1793071: CVE-2020-1722 ipa: No password length restriction leads to denial of service CVE-2020-11022: A Cross-site scripting (XSS) vulnerability exists in JQuery. This flaw allows an attacker with the ability to supply input to the 'HTML' function to inject Javascript into the page where that input is rendered, and have it delivered by the browser. 1828406: CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method CVE-2019-8331: A cross-site scripting vulnerability was discovered in bootstrap. If an attacker could control the data given to tooltip or popover, they could inject HTML or Javascript into the rendered page when tooltip or popover events fired. 1686454: CVE-2019-8331 bootstrap: XSS in the tooltip or popover data-template attribute CVE-2019-11358: A Prototype Pollution vulnerability was found in jquery. Untrusted JSON passed to the `extend` function could lead to modifying objects up the prototype chain, including the global Object. A crafted JSON object passed to a vulnerable method could lead to denial of service or data injection, with various consequences. 1701972: CVE-2019-11358 js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection CVE-2018-20677: In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property. 1668089: CVE-2018-20677 bootstrap: XSS in the affix configuration target property CVE-2018-20676: In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute. 1668082: CVE-2018-20676 bootstrap: XSS in the tooltip data-viewport attribute CVE-2018-14042: In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip. 1601617: CVE-2018-14042 bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip. CVE-2018-14040: In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute. 1601614: CVE-2018-14040 bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute CVE-2016-10735: In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041. 1668097: CVE-2016-10735 bootstrap: XSS in the data-target attribute CVE-2015-9251: jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed. 1399546: CVE-2015-9251 js-jquery: Cross-site scripting via cross-domain ajax requests
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | ipa-client | 0:4.6.8-5.amzn2 |
| Amazon Linux · 2 | ipa-client-common | 0:4.6.8-5.amzn2 |
| Amazon Linux · 2 | ipa-common | 0:4.6.8-5.amzn2 |
| Amazon Linux · 2 | ipa-debuginfo | 0:4.6.8-5.amzn2 |
| Amazon Linux · 2 | ipa-python-compat | 0:4.6.8-5.amzn2 |
| Amazon Linux · 2 | ipa-server | 0:4.6.8-5.amzn2 |
| Amazon Linux · 2 | ipa-server-common | 0:4.6.8-5.amzn2 |
| Amazon Linux · 2 | ipa-server-dns | 0:4.6.8-5.amzn2 |
| Amazon Linux · 2 | ipa-server-trust-ad | 0:4.6.8-5.amzn2 |
| Amazon Linux · 2 | python2-ipaclient | 0:4.6.8-5.amzn2 |
| Amazon Linux · 2 | python2-ipalib | 0:4.6.8-5.amzn2 |
| Amazon Linux · 2 | python2-ipaserver | 0:4.6.8-5.amzn2 |
Vulnerabilities 10
-
Medium 6.9
jQuery has a potential XSS vulnerability
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3…
-
Medium 6.1
Cross-Site Scripting (XSS) in jquery
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
-
Medium 6.1CVE-2016-10735 Public exploit
Bootstrap Cross-site Scripting vulnerability
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
-
Medium 6.1CVE-2018-14040 Public exploit
Bootstrap vulnerable to Cross-Site Scripting (XSS)
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
-
Medium 6.1CVE-2018-14042 Public exploit
Bootstrap Cross-site Scripting vulnerability
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
-
Medium 6.1
XSS vulnerability that affects bootstrap
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
-
Medium 6.1
bootstrap Cross-site Scripting vulnerability
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
-
Medium 6.1
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…
-
Medium 6.1
Bootstrap Vulnerable to Cross-Site Scripting
In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
-
Medium 5.3
A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) t…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2015-9251.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2016-10735.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-14040.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-14042.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-20676.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-20677.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-11358.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2019-8331.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2020-11022.html
-
web
https://alas.aws.amazon.com/cve/html/CVE-2020-1722.html