High WID-SEC-2023-1524 8 CVEs

IBM Spectrum Protect Plus: Mehrere Schwachstellen

Published Jan 31, 2022 · Updated Jun 20, 2023 · Revision 3 · de-DE

Vendor: IBM Vendor: Red Hat Product: Enterprise Linux Product: Spectrum Protect Product: Spectrum Protect Plus < 10.1.9.3 Product: Spectrum Protect plus 10.1 Platform: Linux

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect Plus ausnutzen, um einen Denial-of-Service-Zustand zu verursachen, seine Privilegien zu erweitern, Sicherheitsmaßnahmen zu umgehen und beliebigen Code auszuführen.

Product

IBM Spectrum Protect ist eine zentralisierte Backuplösung für Systeme im Netzwerk.

Vulnerabilities 8

High 8.8

CVE-2021-43858 Public exploit EPSS 35%

User privilege escalation in MinIO

MinIO is a Kubernetes native application for cloud storage. Prior to version `RELEASE.2021-12-27T07-23-18Z`, a malicious client can hand-craft an HTTP API call that allows for updating policy for a user and gaining higher privileges. The patch in version `REL…

minio minio

Dec 27, 2021
High 7.5

CVE-2021-3737 EPSS 13%

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote at…

python3.4 python3.5 python3.6 python3.8 Debian Ubuntu

Mar 4, 2022
High 7.5

CVE-2021-44716

golang.org/x/net/http2 allows uncontrolled memory consumption

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.

golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go

Jan 1, 2022
Medium 6.6

CVE-2021-44832 Public exploit EPSS 98%

Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration

Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control o…

Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven

Dec 28, 2021
Unscored —

CVE-2021-3733

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTT…

python3.4 python3.5 python3.6 python3.8 Debian Ubuntu Azure Linux

Mar 7, 2022
Unscored —

CVE-2021-41771

Panic on invalid symbol tables in debug/macho

ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation.

golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go

Nov 8, 2021
Unscored —

CVE-2021-41772

Panic when opening certain archives in archive/zip

Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field.

golang go stdlib golang-1.8 Ubuntu Azure Linux Alpine Go

Nov 8, 2021
Unscored —

CVE-2021-44717

Misdirected I/O in syscall

Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion.

go stdlib golang-1.8 golang-1.17 Debian Ubuntu Alpine Go

Jan 1, 2022

Revision history

2023-06-20 #3
Neue Updates von IBM aufgenommen
2022-03-03 #2
Neue Updates von Red Hat aufgenommen
2022-01-31 #1
Initiale Fassung

References

IBM Security Bulletin 7005589 vom 2023-06-21
https://www.ibm.com/support/pages/node/7005589
IBM Security Advisory vom 2022-01-31
https://www.ibm.com/support/pages/node/6552186
IBM Security Advisory vom 2022-01-31
https://www.ibm.com/support/pages/node/6540860
Red Hat Security Advisory RHSA-2022:0735 vom 2022-03-03
https://access.redhat.com/errata/RHSA-2022:0735