Skip to content
OpenAdvisories
Medium WID-SEC-2024-0197 2 CVEs

IBM QRadar SIEM: Mehrere Schwachstellen ermöglichen Denial of Service

Published Jan 24, 2024 · Updated Jan 24, 2024 · de-DE

Vendor: IBM Product: QRadar SIEM < 7.5.0 UP7 Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM QRadar Security Information and Event Management (SIEM) bietet Unterstützung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.

Vulnerabilities 2

  • High 7.5
    CVE-2022-3509 Public exploit

    Parsing issue in protobuf textformat

    A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages wit…

    Google Protocolbuffers trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  • Medium 4.3
    CVE-2022-3171

    Memory handling vulnerability in ProtocolBuffers Java core and lite

    A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields …

    Google Protocolbuffers druid trino Debian Ubuntu Wolfi Maven RubyGems

Revision history

  1. #1

    Initiale Fassung

References