IBM InfoSphere Information Server: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2024-45590 Public exploit

  body-parser vulnerable to denial of service when url encoding is enabled

  body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denia…

  expressjs body-parser kubeflow-pipelines-apiserver kubeflow-centraldashboard Debian Ubuntu Azure Linux Wolfi npm
  Sep 10, 2024
• High 7.5
  CVE-2024-7885

  Undertow: improper state management in proxy protocol parsing causes information leakage

  A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a res…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Debian Ubuntu Maven
  Aug 21, 2024

Revision history

1. 2024-11-20 #3

   Neue Updates von IBM aufgenommen

2. 2024-11-04 #2

   Neue Updates von IBM aufgenommen

3. 2024-10-29 #1

   Initiale Fassung

References

• IBM Security Bulletin vom 2024-10-29
  https://www.ibm.com/support/pages/node/7174288
• IBM Security Bulletin vom 2024-10-29
  https://www.ibm.com/support/pages/node/7174289
• IBM Security Bulletin 7174730 vom 2024-11-04
  https://www.ibm.com/support/pages/node/7174730
• IBM Security Bulletin 7176660 vom 2024-11-20
  https://www.ibm.com/support/pages/node/7176660