Oracle Utilities Applications: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 7

• Critical 9.8
  CVE-2020-10683

  dom4j allows External Entities by default which might enable XXE attacks

  dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any applicatio…

  org.dom4j:dom4j dom4j:dom4j dom4j dom4j Debian Ubuntu Maven
  May 1, 2020
• Critical 9.8
  CVE-2022-42889 Public exploit EPSS 100%

  Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

  Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.String…

  Apache Software Foundation Apache Commons Text commons-text org.apache.commons:commons-text Debian Ubuntu Maven
  Oct 13, 2022
• High 7.5
  CVE-2020-11979

  Code injection in Apache Ant

  As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said prot…

  ant ant apache-ant gradle Debian Ubuntu Alpine Maven
  Oct 1, 2020
• High 7.5
  CVE-2022-42003

  Uncontrolled Resource Consumption in Jackson-databind

  In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.

  management-api-for-apache-cassandra-5.0 com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Wolfi Maven
  Oct 2, 2022
• Medium 6.5
  CVE-2021-29425 Public exploit EPSS 11%

  Possible limited path traversal vulnerabily in Apache Commons IO

  In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not furth…

  Apache Software Foundation Apache Commons IO druid commons-io:commons-io Debian Ubuntu Wolfi Maven
  Apr 13, 2021
• Medium 6.5
  CVE-2021-43797

  HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling

  Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty prior to version 4.1.71.Final skips control chars when they are present at the beginning / end of the …

  netty netty netty netty Debian Ubuntu Maven
  Dec 9, 2021
• Medium 5.9
  CVE-2021-45105 Public exploit EPSS 100%

  Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

  Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a craf…

  Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
  Dec 18, 2021

Revision history

1. 2023-01-17 #1

   Initiale Fassung

References

• Oracle Critical Patch Update Advisory - January 2023 - Appendix Oracle Utilities Applications vom 2023-01-17
  https://www.oracle.com/security-alerts/cpujan2023.html#AppendixUTIL