Skip to content
OpenAdvisories
Medium WID-SEC-2024-0274 1 CVE

IBM Maximo Asset Management: Schwachstelle ermöglicht Denial of Service

Published Feb 1, 2024 · Updated Feb 1, 2024 · de-DE

Vendor: IBM Product: Maximo Asset Management 7.6.1.3 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Maximo Asset Management ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Maximo Asset Management ist ein Enterprise-Asset-Management-System, das umfassenden Support für Assets, Maintenance, Ressourcen und Supply-Chain-Management-Anforderungen bietet.

Vulnerabilities 1

  • High 7.5
    CVE-2023-43642

    Missing upper bound check on chunk length in snappy-java

    snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service (DoS) attacks when decompressing data with a too large chunk size. Due to missing upper bou…

    xerial snappy-java druid snappy-java Debian Ubuntu Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References