KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue.
Apache bRPC versions before 1.18.0 do not consistently enforce the configured max_body_size limit in non-progressive HTTP/1 and HTTP/2 parsing and in memcache and couchbase response parsing. A remote unauthenticated peer can cause an affected process to buffer message data beyond the configured…
Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on platforms where plain char is unsigned, such as ARM64, allow remote attackers to cause a process crash and denial of service by sending crafted input containing bytes with the high bit…
Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is enabled, but do not bind the certificate to an expected DNS name or IP address. A network attacker who can redirect or intercept a connection and who possesses a certificate issued by a CA…
An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to crash a bRPC server by sending a request containing a string field with a zero value_size. The UnparsedValue::as_string() function computes `_size - 1` without validating…
Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to make the server allocate a large amount of memory via sending a crafted mcpack request with a huge array item count. Root Cause: The bRPC mcpack2pb parser…
A heap use-after-free in the RTMP protocol component of Apache bRPC (versions < 1.18.0) allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names…
Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cause denial of service by sending a crafted HTTP/2 header block containing many consecutive Dynamic Table Size Update entries. Each update was decoded by recursively invoking the HPACK…
Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to crash a bRPC Redis client process by returning a deeply nested RESP array reply. The parser recursed once for each nested array level without enforcing a depth limit. The fix adds a…
Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote RTMP peer to crash a bRPC process by sending deeply nested AMF objects or arrays. The parser recursively processed nested AMF containers without enforcing a depth limit, which could exhaust the native stack. Affected…
The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. A remote unauthenticated attacker who can reach a bRPC server with RTMP enabled can send a small AMF payload with an excessive declared long string length or array count, causing excessive…
The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated attacker who can reach a bRPC server with Redis service enabled can send an empty array header followed by a bulk string, causing an out-of-bounds write in the parser and…
The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full connection buffer before a complete CRLF-terminated command was available. A remote attacker with access to a Redis-protocol bRPC service could send long inline inputs without a…
The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a hardcoded SUPER_USER (root) identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges (such as USE_PIPE or MAINTAIN) who does NOT have WRITE_DATA or DELETE_DATA permissions on target…
Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authentication for protected non-builtin HTTP endpoints by first sending a builtin HTTP request on the same HTTP/1.1 keep-alive connection. When ServerOptions.auth is enabled and builtin HTTP…
Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue.
An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue.
Identyfikator CVE został odrzucony z powodu fałszywego wykrycia.
Brak opisu, ponieważ ten numer CVE jest zarezerwowany jako duplikat innego CVE.
Wstrzyknięcie sekwencji kontrolnych w usage_rules pozwala na manipulację wyjściem terminala.
Błąd uwierzytelniania w ash_authentication_oauth2_server pozwala nieautoryzowanym atakującym rejestrować klientów OAuth.
Nieprawidłowa ochrona w ash_lua pozwala na odczytanie wrażliwych atrybutów przez skrypty Lua.
Brak limitów przy alokacji zasobów w ash_authentication_oauth2_server pozwala na wyczerpanie pamięci i przestrzeni dyskowej.
Błąd ochrony alternatywnej ścieżki w ash_authentication_oauth2_server umożliwia dostęp do punktów końcowych OAuth bez odpowiednich zabezpieczeń.
Wykorzystanie pamięci podręcznej w ash_authentication_oauth2_server pozwala na ujawnienie danych jednego najemcy innemu.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Missing authentication for critical function vulnerability in Apache IoTDB. | Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue. |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Apache bRPC versions before 1.18.0 do not consistently enforce the configured max_body_size limit in non-progressive HTTP/1 and HTTP/2… | Apache bRPC versions before 1.18.0 do not consistently enforce the configured max_body_size limit in non-progressive HTTP/1 and HTTP/2 parsing and in memcache and couchbase response parsing. A remote unauthenticated peer can cause an affected process to buffer message data beyond the configured… |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on platforms where plain char… | Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on platforms where plain char is unsigned, such as ARM64, allow remote attackers to cause a process crash and denial of service by sending crafted input containing bytes with the high bit… |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is enabled, but do not bind the… | Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is enabled, but do not bind the certificate to an expected DNS name or IP address. A network attacker who can redirect or intercept a connection and who possesses a certificate issued by a CA… |
Do weryfikacji | Nieustalone | Nieustalone | ||
| An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to crash a bRPC… | An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to crash a bRPC server by sending a request containing a string field with a zero value_size. The UnparsedValue::as_string() function computes `_size - 1` without validating… |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to… | Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to make the server allocate a large amount of memory via sending a crafted mcpack request with a huge array item count. Root Cause: The bRPC mcpack2pb parser… |
Do weryfikacji | Nieustalone | Nieustalone | ||
| A heap use-after-free in the RTMP protocol component of Apache bRPC (versions < 1.18.0) allows a remote attacker to crash a bRPC RTMP… | A heap use-after-free in the RTMP protocol component of Apache bRPC (versions < 1.18.0) allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names… |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cause denial of service by… | Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cause denial of service by sending a crafted HTTP/2 header block containing many consecutive Dynamic Table Size Update entries. Each update was decoded by recursively invoking the HPACK… |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to crash a bRPC Redis client… | Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to crash a bRPC Redis client process by returning a deeply nested RESP array reply. The parser recursed once for each nested array level without enforcing a depth limit. The fix adds a… |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote RTMP peer to crash a bRPC process by sending deeply… | Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote RTMP peer to crash a bRPC process by sending deeply nested AMF objects or arrays. The parser recursively processed nested AMF containers without enforcing a depth limit, which could exhaust the native stack. Affected… |
Do weryfikacji | Nieustalone | Nieustalone | ||
| The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. | The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. A remote unauthenticated attacker who can reach a bRPC server with RTMP enabled can send a small AMF payload with an excessive declared long string length or array count, causing excessive… |
Do weryfikacji | Nieustalone | Nieustalone | ||
| The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. | The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated attacker who can reach a bRPC server with Redis service enabled can send an empty array header followed by a bulk string, causing an out-of-bounds write in the parser and… |
Do weryfikacji | Nieustalone | Nieustalone | ||
| The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full connection buffer before a… | The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full connection buffer before a complete CRLF-terminated command was available. A remote attacker with access to a Redis-protocol bRPC service could send long inline inputs without a… |
Do weryfikacji | Nieustalone | Nieustalone | ||
| The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a hardcoded SUPER_USER (root) identity when executing data loading… | The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a hardcoded SUPER_USER (root) identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges (such as USE_PIPE or MAINTAIN) who does NOT have WRITE_DATA or DELETE_DATA permissions on target… |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authentication for protected… | Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authentication for protected non-builtin HTTP endpoints by first sending a builtin HTTP request on the same HTTP/1.1 keep-alive connection. When ServerOptions.auth is enabled and builtin HTTP… |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. | Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue. |
Do weryfikacji | Nieustalone | Nieustalone | ||
| An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before… | An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue. |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Identyfikator CVE został odrzucony z powodu fałszywego wykrycia. | Identyfikator CVE został odrzucony z powodu fałszywego wykrycia. |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Brak opisu, ponieważ ten numer CVE jest zarezerwowany jako duplikat innego CVE. | Brak opisu, ponieważ ten numer CVE jest zarezerwowany jako duplikat innego CVE. |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Wstrzyknięcie sekwencji kontrolnych w usage_rules pozwala na manipulację wyjściem terminala. | Wstrzyknięcie sekwencji kontrolnych w usage_rules pozwala na manipulację wyjściem terminala. |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Błąd uwierzytelniania w ash_authentication_oauth2_server pozwala nieautoryzowanym atakującym rejestrować klientów OAuth. | Błąd uwierzytelniania w ash_authentication_oauth2_server pozwala nieautoryzowanym atakującym rejestrować klientów OAuth. |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Nieprawidłowa ochrona w ash_lua pozwala na odczytanie wrażliwych atrybutów przez skrypty Lua. | Nieprawidłowa ochrona w ash_lua pozwala na odczytanie wrażliwych atrybutów przez skrypty Lua. |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Brak limitów przy alokacji zasobów w ash_authentication_oauth2_server pozwala na wyczerpanie pamięci i przestrzeni dyskowej. | Brak limitów przy alokacji zasobów w ash_authentication_oauth2_server pozwala na wyczerpanie pamięci i przestrzeni dyskowej. |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Błąd ochrony alternatywnej ścieżki w ash_authentication_oauth2_server umożliwia dostęp do punktów końcowych OAuth bez odpowiednich… | Błąd ochrony alternatywnej ścieżki w ash_authentication_oauth2_server umożliwia dostęp do punktów końcowych OAuth bez odpowiednich zabezpieczeń. |
Do weryfikacji | Nieustalone | Nieustalone | ||
| Wykorzystanie pamięci podręcznej w ash_authentication_oauth2_server pozwala na ujawnienie danych jednego najemcy innemu. | Wykorzystanie pamięci podręcznej w ash_authentication_oauth2_server pozwala na ujawnienie danych jednego najemcy innemu. |
Do weryfikacji | Nieustalone | Nieustalone |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.