Skip to content
OpenAdvisories
High 1 exploited CVE NCSC-2024-0293 17 CVEs

Kwetsbaarheden verholpen in Oracle Communications Applications

Published Jul 17, 2024 · Updated Jul 17, 2024 · nl

Vendor: Oracle Product: Communications Billing and Revenue Management Product: Communications BRM - Elastic Charging Engine Product: Communications Converged Application Server Product: Communications Convergence Product: Communications EAGLE LNP Application Processor Product: Communications Interactive Session Recorder Product: Communications Messaging Server Product: Communications Operations Monitor Product: Communications Order and Service Management Product: Communications Policy Management Product: Communications Pricing Design Center Product: Communications Session Border Controller Product: Communications Unified Inventory Management Product: Communications WebRTC Session Controller Product: communications_calendar_server Product: communications_cloud_native_configuration_console Product: communications_cloud_native_core_automated_test_suite Product: communications_cloud_native_core_binding_support_function Product: communications_cloud_native_core_console Product: communications_cloud_native_core_network_data_analytics_function Product: communications_cloud_native_core_network_exposure_function Product: communications_cloud_native_core_network_function_cloud_native_environment Product: communications_cloud_native_core_network_repository_function Product: communications_cloud_native_core_network_slice_selection_function Product: communications_cloud_native_core_policy Product: communications_cloud_native_core_security_edge_protection_proxy Product: communications_cloud_native_core_service_communication_proxy Product: communications_cloud_native_core_unified_data_repository Product: communications_contacts_server +34 more

Summary

Er zijn kwetsbaarheden verholpen in Oracle Communications Applications.

Details

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:

* Denial-of-Service (DoS)
* Toegang tot gevoelige gegevens
* Toegang tot systeemgegevens
* Manipulatie van gegevens
* Omzeilen van beveiligingsmaatregel
* (Remote) code execution (Gebruikersrechten)

Oplossingen
Oracle heeft updates beschikbaar gesteld om de kwetsbaarheden te verhelpen. Zie de referenties voor meer informatie.

Vulnerabilities 17

  • High 7.5
    CVE-2023-44487 Exploited Public exploit EPSS 100%

    HTTP/2 Stream Cancellation Attack

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

    nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL
    KEV Oct 10, 2023
  • Critical 9.1
    CVE-2022-34381

    Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain a…

    Dell Dell BSAFE SSL-J Dell BSAFE Crypto-J
  • High 8.2
    CVE-2024-22257

    Erroneous authentication pass in Spring Security

    In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior to 6.2.3, an application is possible vulnerable to broken access control when it directly uses the Au…

    org.springframework.security:spring-security-core Maven
  • High 8.1
    CVE-2024-22262 Public exploit

    CVE-2024-22262: Spring Framework URL Parsing with Host Validation

    Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html  a…

    Spring Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • High 8.1
    CVE-2024-23807

    Apache Xerces C++: Use-after-free on external DTD scan

    The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD pro…

    Apache Software Foundation Apache Xerces C++ xerces-c xerces-c Ubuntu Azure Linux
  • High 7.6
    CVE-2021-29489

    Options structure open to XSS if passed unfiltered

    Highcharts JS is a JavaScript charting library based on SVG. In Highcharts versions 8 and earlier, the chart options structure was not systematically filtered for XSS vectors. The potential impact was that content from untrusted sources could execute code in …

    highcharts highcharts highcharts npm
  • High 7.5
    CVE-2024-27316 Public exploit EPSS 89%

    Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames

    HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  • Medium 6.5
    CVE-2021-37533

    Apache Commons Net's FTP client trusts the host from PASV response by default

    Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may l…

    Apache Software Foundation Apache Commons Net druid commons-net:commons-net Debian Ubuntu Wolfi Maven
  • Medium 6.5
    CVE-2023-46218

    This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than …

    curl curl mysql curl Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.9
    CVE-2023-48795 Public exploit Scanner template EPSS 94%

    Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server…

    zot kubescape kots k3d Debian Ubuntu Azure Linux Alpine Wolfi PyPI Go crates.io
  • Medium 5.9
    CVE-2023-5981

    Gnutls: timing side-channel in the rsa-psk authentication

    A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  • Medium 5.5
    CVE-2023-29081

    InstallShield Symlink Vulnerability Affecting Suite Project Setups

    A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users to cause a Denial of Service (DoS) condition when handling move operations on local, temporary folde…

    Revenera InstallShield
  • Medium 5.4
    CVE-2024-29133

    Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree

    Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are recommended to upgrade to version 2.10.1, which fixes the issue.

    Apache Software Foundation Apache Commons Configuration druid trino Debian Ubuntu Wolfi Maven
  • Medium 5.3
    CVE-2020-13956

    Cross-site scripting in Apache HttpClient

    Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

    druid trino trino-plugin-opensearch trino-plugin-pinot Debian Ubuntu Wolfi Maven
  • Medium 5.3
    CVE-2024-29025

    Netty HttpPostRequestDecoder can OOM

    Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `HttpPostRequestDecoder` can be tricked to accumulate data. While the decoder can store items on the dis…

    netty netty druid netty Debian Ubuntu Wolfi Maven
  • Medium 4.7
    CVE-2024-0232

    Sqlite: use-after-free bug in jsonparseaddnodearray

    A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash an…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian
  • Unscored —
    CVE-2023-35116

    jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted…

Revision history

  1. #0

    Initiele versie

References