Oracle Health Sciences Applications: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2023-5072

  DoS Vulnerability in JSON-Java

  Denial of Service in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

  https://github.com/stleary/JSON-java openjdk17 openjdk21 libjettison-java Debian Ubuntu Alpine Maven
  Oct 12, 2023
• Medium 5.5
  CVE-2023-42503

  Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file

  Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue…

  Apache Software Foundation Apache Commons Compress trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  Sep 14, 2023

Revision history

1. 2024-04-16 #1

   Initiale Fassung

References

• Oracle Critical Patch Update Advisory - April 2024 - Appendix Oracle Health Sciences Applications vom 2024-04-16
  https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixHCAR