Medium WID-SEC-2024-0556 4 CVEs

Sophos Unified Threat Management (UTM) Software: Mehrere Schwachstellen

Published Mar 5, 2024 · Updated Dec 8, 2024 · Revision 2 · de-DE

Vendor: Sophos Vendor: Ubuntu Product: Linux Product: Unified Threat Management (UTM) Software Platform: Linux Platform: macOS Platform: Windows

Summary

Ein anonymer Angreifer kann mehrere Schwachstellen in der Sophos Unified Threat Management (UTM)-Software ausnutzen, um vertrauliche Informationen offenzulegen, einen Denial of Service zu verursachen Dateien zu manipulieren oder weitere, unbekannte Auswirkungen zu verursachen.

Product

Sophos UTM ist eine Netzwerk-Appliance mit diversen Sicherheitsfunktionen (z.B. Firewall, Antivirus, Contentfilter).

Vulnerabilities 4

Medium 5.9

CVE-2023-28321

An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard pat…

mysql curl curl curl Debian Ubuntu Azure Linux Alpine

May 26, 2023
Medium 5.3

CVE-2023-28322

An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously …

curl curl curl tensorflow Debian Ubuntu Azure Linux Alpine

May 26, 2023
Low 3.7

CVE-2021-22924 Public exploit

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches…

curl curl curl curl Debian Ubuntu Azure Linux Alpine

Aug 5, 2021
Unscored —

CVE-2022-40468

Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used…

tinyproxy tinyproxy tinyproxy Debian Ubuntu Alpine

Sep 19, 2022

Revision history

2024-12-08 #2
Neue Updates von Ubuntu aufgenommen
2024-03-05 #1
Initiale Fassung

References

Sophos Release Notes vom 2024-03-05
https://community.sophos.com/utm-firewall/b/blog/posts/utm-up2date-9-7-mr18-9-718-released-1810208219
Ubuntu Security Notice USN-7140-1 vom 2024-12-09
https://ubuntu.com/security/notices/USN-7140-1