Skip to content
OpenAdvisories
Medium WID-SEC-2023-2858 2 CVEs

IBM Security Guardium: Mehrere Schwachstellen ermöglichen Denial of Service

Published Nov 8, 2023 · Updated Nov 8, 2023 · de-DE

Vendor: IBM Product: Security Guardium Product: Security Guardium 11.3 Product: Security Guardium 11.4 Product: Security Guardium 11.5 Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Security Guardium ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM Security Guardium ist eine Lösung für die Überwachung und Auditierung des Datenzugriffs.

Vulnerabilities 2

  • High 7.5
    CVE-2023-28118

    kaml has potential denial of service while parsing input with anchors and aliases

    kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAM…

    charleskorn kaml com.charleskorn.kaml:kaml Maven
  • Medium 5.9
    CVE-2023-3635 Public exploit

    Okio GzipSource unhandled exception Denial of Service

    GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.

    thingsboard-tb-node thingsboard-tb-mqtt-transport trino trino-plugin-opensearch Ubuntu Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References