Skip to content
OpenAdvisories
High WID-SEC-2024-3196 10 CVEs

Oracle Communications Applications: Mehrere Schwachstellen

Published Oct 15, 2024 · Updated Oct 15, 2024 · de-DE

Vendor: Oracle Product: Communications Applications Platform: Windows

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Communications Applications umfasst eine Sammlung von Werkzeugen zur Verwaltung von Messaging-, Kommunikationsdiensten und -ressourcen.

Vulnerabilities 10

  • Critical 9.1
    CVE-2024-40898 Public exploit

    Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows

    SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests. Users are recommended to upgrade to version 2.4.62 which fixes this issue. 

    Apache Software Foundation Apache HTTP Server apache2 Alpine
  • High 8.1
    CVE-2024-23807

    Apache Xerces C++: Use-after-free on external DTD scan

    The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD pro…

    Apache Software Foundation Apache Xerces C++ xerces-c xerces-c Ubuntu Azure Linux
  • High 7.7
    CVE-2024-5585 EPSS 29%

    Command injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)

    In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using proc_open() command with array syntax, due to insufficient escaping,…

    PHP Group PHP php php83 Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2021-37137

    SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way

    The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vu…

    The Netty project Netty druid netty Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2024-22201

    Jetty connection leaking on idle timeout when TCP congested

    Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptor…

    jetty jetty.project jetty9 jetty Debian Ubuntu Maven
  • High 7.5
    CVE-2024-24549 Public exploit EPSS 23%

    Apache Tomcat: HTTP/2 header handling DoS

    Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after …

    Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
  • High 7.3
    CVE-2024-45492

    An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_gro…

    qt6-qtwebengine qt5-qtwebengine insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.0
    CVE-2024-41817 Public exploit

    Arbitrary Code Execution in `AppImage` version `ImageMagick`

    ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The `AppImage` version `ImageMagick` might use an empty path when setting `MAGICK_CONFIGURE_PATH` and `LD_LIBRARY_PATH` environment variables while executi…

    ImageMagick ImageMagick
  • Medium 6.3
    CVE-2024-7264 EPSS 20%

    ASN.1 date parser overread

    libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting per…

    curl curl curl curl Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.4
    CVE-2024-29133

    Apache Commons Configuration: StackOverflowError calling ListDelimiterHandler.flatten(Object, int) with a cyclical object tree

    Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1. Users are recommended to upgrade to version 2.10.1, which fixes the issue.

    Apache Software Foundation Apache Commons Configuration druid trino Debian Ubuntu Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References