Skip to content
OpenAdvisories
Medium WID-SEC-2023-1754 5 CVEs

IBM InfoSphere Information Server: Mehrere Schwachstellen

Published Jul 16, 2023 · Updated Feb 11, 2025 · Revision 5 · de-DE

Vendor: IBM Product: InfoSphere Data Replication Product: InfoSphere Guardium Product: InfoSphere Information Server Product: Integration Bus Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um Informationen offenzulegen und einen Denial of Service Zustand zu verursachen.

Product

IBM InfoSphere Information Server ist eine Softwareplattform zur Integration heterogener Daten.

Vulnerabilities 5

  • High 7.5
    CVE-2023-34455

    snappy-java's unchecked chunk length leads to DoS

    snappy-java is a fast compressor/decompressor for Java. Due to use of an unchecked chunk length, an unrecoverable fatal error can occur in versions prior to 1.1.10.1. The code in the function hasNextChunk in the fileSnappyInputStream.java checks if a given st…

    xerial snappy-java druid snappy-java Ubuntu Wolfi Maven
  • Medium 5.9
    CVE-2023-34453

    snappy-java's Integer Overflow vulnerability in shuffle leads to DoS

    snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing a fatal error. The function `shuffle(int[] input)` in the file `BitShuffle.java` receives an array o…

    xerial snappy-java druid snappy-java Ubuntu Wolfi Maven
  • Medium 5.9
    CVE-2023-34454

    snappy-java's Integer Overflow vulnerability in compress leads to DoS

    snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing an unrecoverable fatal error. The function `compress(char[] input)` in the file `Snappy.java` receiv…

    xerial snappy-java druid snappy-java Ubuntu Wolfi Maven
  • Medium 5.5
    CVE-2023-2976

    Use of temporary directory for file creation in `FileBackedOutputStream` in Guava

    Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary di…

    Google Guava celeborn-0.6 trino-plugin-clickhouse Debian Ubuntu Azure Linux Wolfi Maven
  • Medium 5.3
    CVE-2023-33857

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially crafted query that could aid in further attacks against the system. IBM X-Force ID: 257695.

    IBM InfoSphere Information Server

Revision history

  1. #5

    Neue Updates von IBM aufgenommen

  2. #4

    Neue Updates von IBM aufgenommen

  3. #3

    Neue Updates von IBM aufgenommen

  4. #2

    Neue Updates von IBM aufgenommen

  5. #1

    Initiale Fassung

References