Latest apache bookkeeper Vulnerabilities

● CVE-2022-32531

The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnera...

Apache Bookkeeper<4.14.6

Apache Bookkeeper=4.15.0

Apache Bookkeeper=4.15.0-rc0

maven/org.apache.bookkeeper:bookkeeper-common=4.15.0

maven/org.apache.bookkeeper:bookkeeper-common<4.14.6

● CVE-2020-23922

An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read.

GifLib Project GifLib<=5.1.4

Apache Bookkeeper=4.12.1

● CVE-2020-36230

A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.

Openldap Openldap<2.4.57

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Apple Mac OS X>=10.14.0<10.14.6

Apple Mac OS X=10.14.6

Apple Mac OS X=10.14.6-security_update_2019-004

and 18 more

● CVE-2019-19924

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.

IBM Data Risk Manager<=2.0.6

SQLite SQLite=3.30.1

Siemens Sinec Infrastructure Network Services<1.0.1.1

Apache Bookkeeper=4.12.1

Oracle Mysql Workbench<=8.0.19

Netapp Cloud Backup

and 4 more

● CVE-2019-17571

A flaw was discovered in Log4j, where a vulnerable SocketServer class may lead to the deserialization of untrusted data. This flaw allows an attacker to remotely execute arbitrary code when combined w...

maven/org.zenframework.z8.dependencies.commons:log4j-1.2.17=2.0

maven/log4j:log4j>=1.2<=1.2.17

debian/apache-log4j1.2<=1.2.17-5<=1.2.17-7<=1.2.17-8

redhat/log4j<0:1.2.14-6.7.el6_10

redhat/log4j<0:1.2.17-16.el7_4

redhat/log4j<0:1.2.14-19.patch_01.ep5.el5

and 45 more

● CVE-2019-19906

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an...

debian/cyrus-sasl2

debian/cyrus-sasl2<=2.1.27~101-g0780600+dfsg-3<=2.1.27+dfsg-1

Apple macOS Catalina<10.15.6

Apple Mojave

Apple High Sierra

Apple iOS<13.6

and 56 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.