SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0
Siemens has released version V13.0.2.0 for JT Utilities to fix multiple vulnerabilities that could be triggered when reading JT files. Siemens recommends to update to the latest version, which contains solutions to all the vulnerabilities listed in this advisory. Standing recommendation is to avoid opening of untrusted files from unknown sources in the affected product, as this generally mitigates the risk of exploitation of this class of vulnerabilities for any product release.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-33715US | medium5.5 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a race condition could cause an object to be released befor… | ||||
| CVE-2021-33714US | medium5.5 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a missing check for the validity of an iterator leads to NU… | ||||
| CVE-2021-33713US | medium5.5 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a hash function is called with an incorrect argument leadin… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0 - CSAF Versionself
- SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0 - PDF Versionself
- SSA-209268: Multiple JT File Parsing Vulnerabilities in JT Utilities before V13.0.2.0 - TXT Versionself
Behebungen (6)
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- BehobenJT Utilities
Update to V13.0.2.0 or later version
- BehobenJT Utilities
Update to V13.0.2.0 or later version
- BehobenJT Utilities
Update to V13.0.2.0 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan