Atlassian Bamboo: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 9

• High 8.8
  CVE-2018-10054 Public exploit EPSS 34%

  Improper Input Validation in Datomic

  H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary Java code. NOTE: the vendor's position is "h2 is not designed to be run outside of a secure environment."

  com.datomic:datomic-free Maven
  Apr 11, 2018
• High 8.0
  CVE-2020-26217 Public exploit Scanner template EPSS 85%

  Remote Code Execution in XStream

  XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XS…

  x-stream xstream libxstream-java libxstream-java Debian Ubuntu Maven
  Nov 16, 2020
• High 7.5
  CVE-2017-7957

  Denial of service in XStream

  XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call.

  com.thoughtworks.xstream:xstream libxstream-java libxstream-java Debian Ubuntu Maven
  Apr 29, 2017
• High 7.5
  CVE-2022-4244 Public exploit

  Codehaus-plexus: directory traversal

  A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by u…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Maven
  Sep 25, 2023
• High 7.5
  CVE-2023-36478

  HTTP/2 HPACK integer overflow and buffer allocation

  Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to exceed their size limi…

  Eclipse Foundation jetty.project jetty9 jetty Debian Ubuntu Alpine Maven
  Oct 10, 2023
• High 7.5
  CVE-2023-39410

  Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK

  When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Java applications using Apache Avro Java SDK up to and including 1.11…

  Apache Software Foundation Apache Avro Java SDK druid tez Wolfi Maven PyPI
  Sep 29, 2023
• High 7.5
  CVE-2023-46589

  Apache Tomcat: HTTP request smuggling via malformed trailer headers

  Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that e…

  Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven
  Nov 28, 2023
• High 7.5
  CVE-2023-5072

  DoS Vulnerability in JSON-Java

  Denial of Service in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

  https://github.com/stleary/JSON-java openjdk17 openjdk21 libjettison-java Debian Ubuntu Alpine Maven
  Oct 12, 2023
• Medium 6.5
  CVE-2022-40152 EPSS 18%

  Stack Buffer Overflow in Woodstox

  Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effec…

  x-stream Woodstox libxstream-java sonarqube-10 Debian Ubuntu Wolfi Maven
  Sep 16, 2022

Revision history

1. 2024-01-15 #1

   Initiale Fassung

References

• Atlassian Security Advisory vom 2024-01-15
  https://jira.atlassian.com/browse/BAM-25623
• Atlassian Security Advisory vom 2024-01-15
  https://jira.atlassian.com/browse/BAM-25622
• Atlassian Security Advisory vom 2024-01-15
  https://jira.atlassian.com/browse/BAM-25614
• Atlassian Security Advisory vom 2024-01-15
  https://jira.atlassian.com/browse/BAM-25613
• Atlassian Security Advisory vom 2024-01-15
  https://jira.atlassian.com/browse/BAM-25612
• Atlassian Security Advisory vom 2024-01-15
  https://jira.atlassian.com/browse/BAM-25609
• Atlassian Security Advisory vom 2024-01-15
  https://jira.atlassian.com/browse/BAM-25607
• Atlassian Security Advisory vom 2024-01-15
  https://jira.atlassian.com/browse/BAM-25606
• Atlassian Security Advisory vom 2024-01-15
  https://jira.atlassian.com/browse/BAM-25640