—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2023.3839
IBM QRadar SIEM includes components with known vulnerabilities
7 July 2023
===========================================================================
AusCERT Security Bulletin Summary
———————————
Product: IBM Security QRadar SIEM
Publisher: IBM
Operating System: Linux variants
Resolution: Patch/Upgrade
CVE Names: CVE-2023-28708 CVE-2023-25194 CVE-2023-24998
CVE-2023-24329 CVE-2023-20863 CVE-2023-20861
CVE-2023-20860 CVE-2023-20859 CVE-2023-1999
CVE-2023-1436 CVE-2023-0767 CVE-2023-0286
CVE-2022-45693 CVE-2022-45685 CVE-2022-45061
CVE-2022-43750 CVE-2022-42703 CVE-2022-42004
CVE-2022-42003 CVE-2022-41903 CVE-2022-40151
CVE-2022-40150 CVE-2022-40149 CVE-2022-38023
CVE-2022-37434 CVE-2022-34917 CVE-2022-23521
CVE-2022-4378 CVE-2022-0391 CVE-2021-43138
CVE-2021-28861 CVE-2021-23336 CVE-2021-3737
CVE-2021-3733 CVE-2020-26116 CVE-2019-18348
CVE-2019-9740 CVE-2019-8331 CVE-2018-20060
CVE-2016-10735 CVE-2015-20107 CVE-2015-0254
Original Bulletin:
https://www.ibm.com/support/pages/node/7010099
Comment: CVSS (Max): 9.8 CVE-2022-41903 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVSS Source: IBM
Calculator: https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
– ————————–BEGIN INCLUDED TEXT——————–
TITLE: IBM QRadar SIEM includes components with known vulnerabilities
URL: https://www.ibm.com/support/pages/node/7010099
=== ESB ===vVv=== SCRAPED BULLETIN BODY ===vVv=== ESB ===
Security Bulletin: IBM QRadar SIEM includes components with known
vulnerabilities
Document Information
Document number : 7010099
Modified date : 06 July 2023
Product : IBM Security QRadar SIEM
Component : –
Software version : 7.5
Operating system(s): Linux
Security Bulletin
Summary
The product includes vulnerable components (e.g., framework libraries) that may
be identified and exploited with automated tools. IBM QRadar SIEM has addressed
the applicable CVEs.
Vulnerability Details
CVEID: CVE-2023-24329
DESCRIPTION: Python could allow a remote attacker to bypass security
restrictions, caused by a flaw in the urllib.parse component. By sending a
specially-crafted request using URL starts with blank characters, an attacker
could exploit this vulnerability to bypass blocklisting methods.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
247730 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
CVEID: CVE-2023-1436
DESCRIPTION: Jettison is vulnerable to a denial of service, caused by an
infinite recursion when constructing a JSONArray from a Collection that
contains a self-reference in one of its elements. A remote attacker could
exploit this vulnerability to cause a denial of service.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
250490 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
CVEID: CVE-2023-0286
DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a type
confusion error related to X.400 address processing inside an X.509
GeneralName. By passing arbitrary pointers to a memcmp call, a remote attacker
could exploit this vulnerability to read memory contents or cause a denial of
service.
CVSS Base score: 8.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
246611 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
CVEID: CVE-2019-9740
DESCRIPTION: Python is vulnerable to HTTP header injection, caused by improper
validation of input in the urllib2. By sending a specially-crafted request, a
remote attacker could exploit this vulnerability to inject arbitrary HTTP
headers, which will allow the attacker to conduct various attacks against the
vulnerable system, including cross-site scripting, cache poisoning or session
hijacking.
CVSS Base score: 6.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
158138 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
CVEID: CVE-2021-3737
DESCRIPTION: Python is vulnerable to a denial of service, caused by improper
handling of HTTP response in the HTTP client code. By persuading a victim to
visit a specially-crafted web site, a remote attacker could exploit this
vulnerability to cause the client script enter an infinite loop, and results in
a denial of service condition.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
213407 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
CVEID: CVE-2022-0391
DESCRIPTION: Python could provide weaker than expected security, cause by a
improper input validation by the urllib.parse module. By sending a
specially-crafted request using r and n characters in the URL path. An
attacker could exploit this vulnerability to perform injection attack or launch
further attacks on the system.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
219613 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
CVEID: CVE-2022-45061
DESCRIPTION: Python is vulnerable to a denial of service, caused by an
unnecessary quadratic algorithm exists in one path when processing some inputs
to the IDNA (RFC 3490) decoder. By sending a specially-crafted input, a remote
attacker could exploit this vulnerability to cause a CPU denial of service
condition.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
240593 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVEID: CVE-2021-23336
DESCRIPTION: Python CPython could allow a remote attacker to bypass security
restrictions, caused by a web cache poisoning flaw via urllib.parse.parse_qsl
and urllib.parse.parse_qs. By sending a specially-crafted request parameter
cloaking, an attacker could exploit this vulnerability to cause a difference in
the interpretation of the request between the proxy and the server.
CVSS Base score: 5.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
196808 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H)
CVEID: CVE-2018-20060
DESCRIPTION: urllib3 could allow a remote attacker to obtain sensitive
information, caused by the failure to remove the Authorization HTTP header when
following a cross-origin redirect. By sending a specially-crafted request, a
remote attacker could exploit this vulnerability to obtain credentials in the
Authorization header.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
154226 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
CVEID: CVE-2021-28861
DESCRIPTION: Python could allow a remote attacker to conduct phishing attacks,
caused by
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
234228 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
CVEID: CVE-2019-18348
DESCRIPTION: Python is vulnerable to HTTP header injection, caused by improper
validation of input in the urllib2. By sending a specially-crafted request, a
remote attacker could exploit this vulnerability to inject arbitrary HTTP
headers, which will allow the attacker to conduct various attacks against the
vulnerable system, including cross-site scripting, cache poisoning or session
hijacking.
CVSS Base score: 5.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
169989 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
CVEID: CVE-2020-26116
DESCRIPTION: Python is vulnerable to CRLF injection, caused by improper
validation of user-supplied input in http.client. By inserting CR and LF
control characters in the first argument of HTTPConnection.request, a remote
attacker could exploit this vulnerability to conduct various attacks against
the vulnerable system, including cross-site scripting, cache poisoning or
session hijacking.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
189404 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
CVEID: CVE-2021-3733
DESCRIPTION: Python is vulnerable to a denial of service, caused by a regular
expression denial of service (ReDoS) flaw in the AbstractBasicAuthHandler class
in urllib. By persuading a victim to visit a specially-crafted web site, a
remote attacker could exploit this vulnerability to cause a denial of service
condition.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
213034 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
CVEID: CVE-2015-20107
DESCRIPTION: Python could allow a remote attacker to execute arbitrary commands
on the system, caused by improper input validation in mailcap module. By
sending a specially-crafted request, an attacker could exploit this
vulnerability to execute arbitrary commands on the system.
CVSS Base score: 9.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
224937 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVEID: CVE-2023-20860
DESCRIPTION: VMware Tanzu Spring Framework could allow a remote attacker to
bypass security restrictions, caused by the use of an un-prefixed double
wildcard pattern with the mvcRequestMatcher in Spring Security configuration.
An attacker could exploit this vulnerability to create a mismatch in pattern
matching between Spring Security and Spring MVC.
CVSS Base score: 9.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
250679 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
CVEID: CVE-2019-8331
DESCRIPTION: Bootstrap is vulnerable to cross-site scripting, caused by
improper validation of user-supplied input by the tooltip or popover
data-template. A remote attacker could exploit this vulnerability to execute
script in a victim’s Web browser within the security context of the hosting Web
site. An attacker could use this vulnerability to steal the victim’s
cookie-based authentication credentials.
CVSS Base score: 6.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
157409 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
CVEID: CVE-2016-10735
DESCRIPTION: Bootstrap is vulnerable to cross-site scripting, caused by
improper validation of user-supplied input by the data-target attribute. A
remote attacker could exploit this vulnerability to execute script in a
victim’s Web browser within the security context of the hosting Web site. An
attacker could use this vulnerability to steal the victim’s cookie-based
authentication credentials.
CVSS Base score: 6.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
155339 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
CVEID: CVE-2022-40150
DESCRIPTION: jettison-json Jettison is vulnerable to a denial of service,
caused by an out of memory flaw. By sending a specially-crafted XML or JSON
data, a remote authenticated attacker could exploit this vulnerability to
causes the parser to crash, and results in a denial of service condition.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
236353 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
CVEID: CVE-2022-45685
DESCRIPTION: Jettison is vulnerable to a denial of service, caused by a
stack-based buffer overflow. By sending an overly long string using JSON data,
a remote attacker could exploit this vulnerability to cause a denial of
service.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
242596 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVEID: CVE-2022-40149
DESCRIPTION: jettison-json Jettison is vulnerable to a denial of service,
caused by a stack-based buffer overflow. By sending a specially-crafted XML or
JSON data, a remote authenticated attacker could exploit this vulnerability to
causes the parser to crash, and results in a denial of service condition.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
236352 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
CVEID: CVE-2022-45693
DESCRIPTION: Jettison is vulnerable to a denial of service, caused by a
stack-based buffer overflow. By sending a specially-crafted request using the
map parameter, a remote attacker could exploit this vulnerability to cause a
denial of service.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
242274 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
CVEID: CVE-2023-28708
DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive
information, caused by the missing of secure attribute in some configurations
for JSESSIONID Cookie when using the RemoteIpFilter. By sniffing the network
traffic, an attacker could exploit this vulnerability to obtain session cookie
information, and use this information to launch further attacks against the
affected system.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
250740 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
CVEID: CVE-2023-24998
DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of
service, caused by not limit the number of request parts to be processed in the
file upload function. By sending a specially-crafted request with series of
uploads, a remote attacker could exploit this vulnerability to cause a denial
of service condition.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
247895 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVEID: CVE-2022-43750
DESCRIPTION: An unspecified vulnerability in drivers/usb/mon/mon_bin.c in
usbmon in the Linux Kernel could allow a local authenticated attacker to
corrupt the monitor’s internal memory.
CVSS Base score: 7.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
239130 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVEID: CVE-2022-40151
DESCRIPTION: XStream is vulnerable to a denial of service, caused by a
stack-based buffer overflow. By sending a specially-crafted XML data, a remote
authenticated attacker could exploit this vulnerability to causes the parser to
crash, and results in a denial of service condition.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
236354 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
CVEID: CVE-2023-1999
DESCRIPTION: Mozilla Firefox could allow a remote attacker to execute arbitrary
code on the system, caused by a double-free in libwebp. By persuading a victim
to visit a specially crafted Web site, a remote attacker could exploit this
vulnerability using unknown attack vectors to execute arbitrary code on the
vulnerable system or cause a denial of service.
CVSS Base score: 8.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
254784 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVEID: CVE-2022-42004
DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial of service,
caused by a lack of a check in in the BeanDeserializer._deserializeFromArray
function. By sending a specially-crafted request using deeply nested arrays, a
local attacker could exploit this vulnerability to exhaust all available
resources.
CVSS Base score: 6.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
237660 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVEID: CVE-2022-42003
DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial of service,
caused by a lack of a check in the primitive value deserializers when the
UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled. By sending a specially-crafted
request using deep wrapper array nesting, a local attacker could exploit this
vulnerability to exhaust all available resources.
CVSS Base score: 6.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
237662 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVEID: CVE-2023-20859
DESCRIPTION: VMware Tanzu Spring Vault could allow a local authenticated
attacker to obtain sensitive information, caused by the insertion of sensitive
information into log sourced from failed revocation of tokens. By gaining
access to the log files, an attacker could exploit this vulnerability to obtain
sensitive information, and use this information to launch further attacks
against the affected system.
CVSS Base score: 4.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
250863 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
CVEID: CVE-2022-34917
DESCRIPTION: Apache Kafka is vulnerable to a denial of service, caused by
improper input validation. By sending a specially-crafted request, a remote
attacker could exploit this vulnerability to allocate large amounts of memory
on brokers, and results in a denial of service condition.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
236498 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVEID: CVE-2023-25194
DESCRIPTION: Apache Kafka could allow a remote authenticated attacker to
execute arbitrary code on the system, caused by an unsafe deserialization when
configuring the connector via the Kafka Connect REST API. By sending
specially-crafted request, an attacker could exploit this vulnerability to
execute arbitrary code or cause a denial of service on the system.
CVSS Base score: 8.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
246698 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
CVEID: CVE-2021-43138
DESCRIPTION: Async could allow a remote attacker to execute arbitrary code on
the system, caused by prototype pollution in the mapValues() method. By
persuading a victim to open a specially-crafted file, an attacker could exploit
this vulnerability to execute arbitrary code on the system.
CVSS Base score: 7.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
223605 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVEID: CVE-2022-4378
DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a
stack-based buffer overflow in the __do_proc_dointvec function. By executing a
specially-crafted program, a local authenticated attacker could exploit this
vulnerability to cause a denial of service condition.
CVSS Base score: 5.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
242006 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
CVEID: CVE-2022-42703
DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a
use-after-free flaw related to leaf anon_vma double reuse in mm/rmap.c. By
sending a specially-crafted request, a local attacker could exploit this
vulnerability to cause a denial of service.
CVSS Base score: 6.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
238058 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVEID: CVE-2023-0767
DESCRIPTION: Mozilla Network Security Services (NSS), as used in Mozilla
Firefox, could allow a remote attacker to execute arbitrary code on the system,
caused by an arbitrary memory write. By constructing a PKCS 12 cert bundle in
such a way, a remote attacker could exploit this vulnerability using PKCS 12
Safe Bag attributes to allow for arbitrary memory writes and execute arbitrary
code on the vulnerable system.
CVSS Base score: 8.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
247260 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVEID: CVE-2015-0254
DESCRIPTION: Apache Standard Taglibs could allow a remote attacker to execute
arbitrary code on the system, caused by an XML External Entity Injection (XXE)
error when processing XML data. By sending specially-crafted XML data, an
attacker could exploit this vulnerability to execute arbitrary code on the
system.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
101550 for the current score.
CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P)
CVEID: CVE-2022-38023
DESCRIPTION: Microsoft Windows could allow a remote attacker to gain elevated
privileges on the system, caused by a flaw in the Netlogon RPC. By sending a
specially crafted request, an attacker could exploit this vulnerability to gain
elevated privileges on the system.
CVSS Base score: 8.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
238862 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVEID: CVE-2022-37434
DESCRIPTION: zlib is vulnerable to a heap-based buffer overflow, caused by
improper bounds checking by inflate in inflate.c. By using a large gzip header
extra field, a remote attacker could overflow a buffer and execute arbitrary
code on the system.
CVSS Base score: 7.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
232849 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
CVEID: CVE-2022-23521
DESCRIPTION: Git could allow a remote attacker to execute arbitrary code on the
system, caused by an integer overflow when parsing gitattributes. By sending
specially-crafted input, an attacker could exploit this vulnerability to
execute arbitrary code on the system.
CVSS Base score: 9.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
244893 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVEID: CVE-2022-41903
DESCRIPTION: Git could allow a remote attacker to execute arbitrary code on the
system, caused by an integer overflow when processing the padding operators. By
sending specially-crafted input, an attacker could exploit this vulnerability
to execute arbitrary code on the system.
CVSS Base score: 9.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
244889 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
CVEID: CVE-2023-20861
DESCRIPTION: VMware Tanzu Spring Framework is vulnerable to a denial of
service. By sending a specially crafted SpEL expression, a remote attacker
could exploit this vulnerability to cause a denial of service.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
250701 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
CVEID: CVE-2023-20863
DESCRIPTION: VMware Tanzu Spring Framework is vulnerable to a denial of
service, caused by improper input validation. By sending a specially crafted
SpEL expression, a remote attacker could exploit this vulnerability to cause a
denial of service condition.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/
252807 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected Products and Versions
+————+———-+
|Affected |Version(s)|
|Product(s) | |
+————+———-+
|IBM QRadar |7.5.0 – |
|SIEM |7.5.0 UP5 |
+————+———-+
Remediation/Fixes
IBM encourages customers to update their systems promptly.
+—————+——-+———————+
|Product |Version|Remediation/First Fix|
+—————+——-+———————+
|IBM QRadar SIEM|7.5.0 |7.5.0 UP6 |
+—————+——-+———————+
Workarounds and Mitigations
None
Acknowledgement
Change History
06 Jul 2023: Initial Publication
*The CVSS Environment Score is customer environment specific and will
ultimately impact the Overall CVSS Score. Customers can evaluate the impact of
this vulnerability in their environments by accessing the links in the
Reference section of this Security Bulletin.
Disclaimer
According to the Forum of Incident Response and Security Teams (FIRST), the
Common Vulnerability Scoring System (CVSS) is an “industry open standard
designed to convey vulnerability severity and help to determine urgency and
priority of response.” IBM PROVIDES THE CVSS SCORES “”AS IS”” WITHOUT WARRANTY
OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF
ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY. In addition to other efforts to
address potential vulnerabilities, IBM periodically updates the record of
components contained in our product offerings. As part of that effort, if IBM
identifies previously unidentified packages in a product/service inventory, we
address relevant vulnerabilities regardless of CVE date. Inclusion of an older
CVEID does not demonstrate that the referenced product has been used by IBM
since that date, nor that IBM was aware of a vulnerability as of that date. We
are making clients aware of relevant vulnerabilities as we become aware of
them. “Affected Products and Versions” referenced in IBM Security Bulletins are
intended to be only products and versions that are supported by IBM and have
not passed their end-of-support or warranty date. Thus, failure to reference
unsupported or extended-support products and versions in this Security Bulletin
does not constitute a determination by IBM that they are unaffected by the
vulnerability. Reference to one or more unsupported versions in this Security
Bulletin shall not create an obligation for IBM to provide fixes for any
unsupported or extended-support products or versions.
– ————————–END INCLUDED TEXT——————–
You have received this e-mail bulletin as a result of your organisation’s
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to [email protected]
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT’s members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation’s
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author’s website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: [email protected]
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
—–BEGIN PGP SIGNATURE—–
Comment: https://auscert.org.au/gpg-key/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=9zFF
—–END PGP SIGNATURE—–
Source: Read More
Security Bulletins