Applications stack vulnerabilities · Page 9

CVE-2024-20922

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete ac

CVE-2024-20918

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and 22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modificati

• Update to 11.0.22+7-0ubuntu2~18.04.1
• Update to 11.0.22+7-0ubuntu2~20.04.1
• Update to 17.0.10+7-1~18.04.1
• Update to 17.0.10+7-1~20.04.1
• Update to 17.0.10+7-1~22.04.1
• Update to 17.0.10+7-1~deb12u1
• Update to 21.0.2+13-1
• Update to 21.0.2+13-1~20.04.1
• Update to 8u402-ga-2ubuntu1~18.04
• Update to 8u402-ga-2ubuntu1~20.04
• Update to 8u432-ga~us1-0ubuntu2~16.04.4

Code injection in zabbix_agent2 smart.disk.get caused by smartctl plugin

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution.

• Update to 1:6.0.24+dfsg-1
• Update to 5.0.39rc1
• Update to 6.0.24rc1
• Update to 6.4.9rc1
• Update to 7.0.0alpha8

Code execution vulnerability in icmpping

An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.

• Update to 1:6.0.23+dfsg-1
• Update to 4.0.50
• Update to 5.0.39
• Update to 6.0.23rc1
• Update to 6.4.8rc1
• Update to 7.0.0alpha7

Possible buffer overread from reading DNS responses

The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server.

• Update to 1:6.0.24+dfsg-1
• Update to 5.0.40
• Update to 6.0.24
• Update to 6.4.9
• Update to 7.0.0alpha8

Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.

The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.

• Update to 1:6.0.23+dfsg-1
• Update to 6.0.22rc1
• Update to 6.4.7rc1
• Update to 7.0.0alpha4

CVE-2023-22081

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and 22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS)

• Update to 11.0.21+9-0ubuntu1~18.04
• Update to 11.0.21+9-0ubuntu1~20.04
• Update to 17.0.9+9-1~18.04
• Update to 17.0.9+9-1~20.04
• Update to 17.0.9+9-1~22.04
• Update to 17.0.9+9-1~deb12u1
• Update to 21.0.1+12-1
• Update to 8u392-ga-1~16.04
• Update to 8u392-ga-1~18.04
• Update to 8u392-ga-1~20.04

CVE-2023-22067

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf; Oracle GraalVM Enterprise Edition: 20.3.11 and 21.3.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying

• Update to 8u392-ga-1~16.04
• Update to 8u392-ga-1~18.04
• Update to 8u392-ga-1~20.04
• Update to 8u392-ga-1~22.04

CVE-2023-22025

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and 22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Orac

• Update to 11.0.21+9-0ubuntu1~18.04
• Update to 11.0.21+9-0ubuntu1~20.04
• Update to 17.0.9+9-1~18.04
• Update to 17.0.9+9-1~20.04
• Update to 17.0.9+9-1~22.04
• Update to 17.0.9+9-1~deb12u1
• Update to 21.0.1+12-1
• Update to 8u392-ga-1~16.04
• Update to 8u392-ga-1~18.04
• Update to 8u392-ga-1~20.04

CVE-2023-4399

Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, Request security is a deny list that allows admins to configure Grafana in a way so that the instance doesn’t call specific hosts. However, the restriction can be bypassed used punycode encoding of the characters in the request address.

• Update to 10.0.9
• Update to 10.1.5
• Update to 9.4.17
• Update to 9.5.13

CVE-2023-4822

Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations. It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally. This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user. Th

• Update to 10.0.7
• Update to 10.1.3
• Update to 9.4.16
• Update to 9.5.11

JavaScript engine memory pointers are directly available for Zabbix users for modification

Memory pointer is in a property of the Ducktape object. This leads to multiple vulnerabilities related to direct memory access and manipulation.

• Update to 1:6.0.23+dfsg-1
• Update to 5.0.37rc1
• Update to 6.0.21rc1
• Update to 6.4.6rc1
• Update to 7.0.0alpha4

Inefficient permission check in class CControllerAuthenticationUpdate

Request to LDAP is sent before user permissions are checked.

• Update to 1:5.0.0+dfsg-1
• Update to 4.0.20rc1
• Update to 4.4.8rc1
• Update to 5.0.0alpha4

Stack-buffer Overflow in library module zbxjson

The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbx_json_open.

• Update to 1:6.0.23+dfsg-1
• Update to 6.0.21rc1
• Update to 6.4.6rc1
• Update to 7.0.0alpha4

Stored XSS in Maps element

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL.

• Update to 1:6.0.23+dfsg-1
• Update to 4.0.48rc1
• Update to 5.0.37rc1
• Update to 6.0.21rc1
• Update to 6.4.6rc1
• Update to 7.0.0alpha4

Agent 2 package are built with Go version affected by CVE-2023-24538

Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to terminate the literal, injecting arbitrary Javascript code into the Go template. As ES6 template literals are rather complex, and themselves can do string interpolation, the decision was made to simply disallow Go template actions from being used inside of them (e.g., "var a = {{.}}"), since there is no obviously safe way to allow this behavior. Thi

• Update to 1:6.0.23+dfsg-1
• Update to 5.0.35
• Update to 6.0.18
• Update to 6.4.3

CVE-2023-22049

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7 and 20.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized update, insert or delete acces

• Update to 11.0.20+8-1ubuntu1~18.04
• Update to 11.0.20+8-1ubuntu1~20.04
• Update to 17.0.8+7-1~18.04
• Update to 17.0.8+7-1~20.04.2
• Update to 17.0.8+7-1~22.04
• Update to 17.0.8+7-1~deb12u1
• Update to 8u382-ga-1~16.04.1
• Update to 8u382-ga-1~18.04.1
• Update to 8u382-ga-1~20.04.1

CVE-2023-22045

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7 and 20.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracl

• Update to 11.0.20+8-1ubuntu1~18.04
• Update to 11.0.20+8-1ubuntu1~20.04
• Update to 17.0.8+7-1~18.04
• Update to 17.0.8+7-1~20.04.2
• Update to 17.0.8+7-1~22.04
• Update to 17.0.8+7-1~deb12u1
• Update to 8u382-ga-1~16.04.1
• Update to 8u382-ga-1~18.04.1
• Update to 8u382-ga-1~20.04.1

CVE-2023-22044

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u371-perf, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7 and 20.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM

• Update to 17.0.8+7-1~18.04
• Update to 17.0.8+7-1~20.04.2
• Update to 17.0.8+7-1~22.04
• Update to 17.0.8+7-1~deb12u1

CVE-2023-22043

Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u371. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet)

• Update to 11+26-1