DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Red Hat Virtualization: Mehrere Schwachstellen ermöglichen Denial of Service
Advisory ansehen veröffentlicht 2022-07-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Virtualization ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-31051US | high7.5 | — | ||
semantic-release is an open source npm package for automated version management and package publishing. In affected versions secrets that would normally be masked by semantic-relea… | ||||
| CVE-2022-22950US | medium6.5 | — | ||
n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of servi… | ||||
| CVE-2021-3807US | high7.5 | — | ||
ansi-regex is vulnerable to Inefficient Regular Expression Complexity | ||||
| CVE-2021-36090US | high7.5 | — | ||
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This… | ||||
| CVE-2021-35517US | high7.5 | — | ||
When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This… | ||||
| CVE-2021-35516US | high7.5 | — | ||
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This… | ||||
| CVE-2021-35515US | high7.5 | — | ||
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of… | ||||
| CVE-2021-33623US | high7.5 | — | ||
The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Red Hat Security Advisory RHSA-2022:5555 vom 2022-07-14external
- Red Hat Security Advisory RHSA-2022:5903 vom 2022-08-04external
- Red Hat Security Advisory RHSA-2026:34342 vom 2026-07-01external
- Atlassian Security Bulletin - November 18 2025external
- WID-SEC-W-2022-0699 - CSAF Versionself
- WID-SEC-2022-0699 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan