Skip to content
OpenAdvisories
Medium WID-SEC-2024-0101 9 CVEs

Atlassian Bitbucket: Mehrere Schwachstellen

Published Jan 15, 2024 · Updated Feb 20, 2024 · Revision 2 · de-DE

Vendor: Atlassian Product: Bitbucket Product: Confluence Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Atlassian Bitbucket ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder Request-Smuggling-Angriffe durchzuführen.

Product

Bitbucket ist ein Git-Server zur Sourcecode-Versionskontrolle.

Vulnerabilities 9

  • High 7.5
    CVE-2023-34455

    snappy-java's unchecked chunk length leads to DoS

    snappy-java is a fast compressor/decompressor for Java. Due to use of an unchecked chunk length, an unrecoverable fatal error can occur in versions prior to 1.1.10.1. The code in the function hasNextChunk in the fileSnappyInputStream.java checks if a given st…

    xerial snappy-java druid snappy-java Ubuntu Wolfi Maven
  • High 7.5
    CVE-2023-36478

    HTTP/2 HPACK integer overflow and buffer allocation

    Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to exceed their size limi…

    Eclipse Foundation jetty.project jetty9 jetty Debian Ubuntu Alpine Maven
  • High 7.5
    CVE-2023-43642

    Missing upper bound check on chunk length in snappy-java

    snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service (DoS) attacks when decompressing data with a too large chunk size. Due to missing upper bou…

    xerial snappy-java druid snappy-java Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2023-46589

    Apache Tomcat: HTTP request smuggling via malformed trailer headers

    Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that e…

    Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
  • High 7.5
    CVE-2023-5072

    DoS Vulnerability in JSON-Java

    Denial of Service in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

    https://github.com/stleary/JSON-java openjdk17 openjdk21 libjettison-java Debian Ubuntu Alpine Maven
  • High 7.1
    CVE-2023-6378

    Logback "receiver" DOS vulnerability

    A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

    QOS.CH Sarl logback trino tez Debian Ubuntu Wolfi Maven
  • High 7.1
    CVE-2023-6481

    Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix

    A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

    QOS.CH Sarl logback ch.qos.logback:logback-core Maven
  • Medium 5.9
    CVE-2023-34453

    snappy-java's Integer Overflow vulnerability in shuffle leads to DoS

    snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing a fatal error. The function `shuffle(int[] input)` in the file `BitShuffle.java` receives an array o…

    xerial snappy-java druid snappy-java Ubuntu Wolfi Maven
  • Medium 5.9
    CVE-2023-34454

    snappy-java's Integer Overflow vulnerability in compress leads to DoS

    snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing an unrecoverable fatal error. The function `compress(char[] input)` in the file `Snappy.java` receiv…

    xerial snappy-java druid snappy-java Ubuntu Wolfi Maven

Revision history

  1. #2

    Neue Updates aufgenommen

  2. #1

    Initiale Fassung

References