Latest oracle sd-wan edge Vulnerabilities

● CVE-2022-22965

Spring Framework JDK 9+ Remote Code Execution Vulnerability

VMware Spring Framework

VMware Spring Framework<5.2.20

VMware Spring Framework>=5.3.0<5.3.18

Cisco CX Cloud Agent<2.1.0

Oracle Communications Cloud Native Core Automated Test Suite=1.9.0

Oracle Communications Cloud Native Core Automated Test Suite=22.1.0

and 84 more

● CVE-2022-22963

VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

VMware Tanzu Spring Cloud

Vmware Spring Cloud Function<=3.1.6

Vmware Spring Cloud Function>=3.2.0<=3.2.2

Oracle Banking Branch=14.5

Oracle Banking Cash Management=14.5

Oracle Banking Corporate Lending Process Management=14.5

and 42 more

● CVE-2021-42340

Apache Tomcat is vulnerable to a denial of service, caused by a memory leak flaw in WebSocket connections. By sending a specially-crafted request using OutOfMemoryError, a remote attacker could exploi...

redhat/pki-servlet-engine<1:9.0.50-1.el9

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el7

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el7

redhat/jws5-tomcat-vault<0:1.1.8-4.Final_redhat_00004.1.el7

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el8

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el8

and 47 more

● CVE-2021-33037

Apache Tomcat is vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially-crafted HTTP(S) transfer-encoding request header,...

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el7

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el7

redhat/jws5-tomcat-vault<0:1.1.8-4.Final_redhat_00004.1.el7

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el8

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el8

redhat/jws5-tomcat-vault<0:1.1.8-4.Final_redhat_00004.1.el8

and 91 more

● CVE-2020-35491

A flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity...

IBM Security Verify Governance<=10.0

redhat/jackson-databind<2.9.10.8

FasterXML jackson-databind>=2.0.0<2.9.10.8

NetApp Service Level Manager

Debian Debian Linux=9.0

Oracle Agile PLM=9.3.6

and 35 more

● CVE-2020-17527

Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by an issue when the HTTP request header value can be reused from the previous stream received on an HTTP/2 connecti...

redhat/jws5-tomcat<0:9.0.36-9.redhat_8.1.el7

redhat/jws5-tomcat-native<0:1.2.25-3.redhat_3.el7

redhat/jws5-tomcat<0:9.0.36-9.redhat_8.1.el8

redhat/jws5-tomcat-native<0:1.2.25-3.redhat_3.el8

redhat/tomcat<10.0.0

redhat/tomcat<9.0.40

and 65 more

● CVE-2020-13943

A flaw was found in Apache Tomcat. If an HTTP/2 client exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it is possible that a subsequent...

maven/org.apache.tomcat:tomcat-coyote>=8.5.0<=8.5.57

maven/org.apache.tomcat:tomcat-coyote>=9.0.0-M1<=9.0.37

maven/org.apache.tomcat:tomcat-coyote>=10.0.0-M1<=10.0.0-M7

redhat/jws5-tomcat<0:9.0.36-9.redhat_8.1.el7

redhat/jws5-tomcat-native<0:1.2.25-3.redhat_3.el7

redhat/jws5-tomcat<0:9.0.36-9.redhat_8.1.el8

and 139 more

● CVE-2020-36518

A flaw was found in the Jackson Databind package. This cause of the issue is due to a Java StackOverflow exception and a denial of service via a significant depth of nested objects.

debian/jackson-databind<=2.9.8-3+deb10u3

redhat/jackson-databind<0:2.14.1-2.el9

redhat/eap7-jackson-databind<0:2.12.6.1-1.redhat_00003.1.el8ea

redhat/eap7-jackson-databind<0:2.12.6.1-1.redhat_00003.1.el7ea

redhat/rh-sso7-keycloak<0:15.0.8-1.redhat_00001.1.el7

redhat/rh-sso7-keycloak<0:15.0.8-1.redhat_00001.1.el8

and 88 more

● CVE-2020-16166

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is relate...

redhat/kernel-alt<0:4.14.0-115.32.1.el7a

redhat/kernel-rt<0:4.18.0-240.8.1.rt7.62.el8_3

redhat/kernel<0:4.18.0-240.8.1.el8_3

redhat/kernel<0:4.18.0-147.38.1.el8_1

redhat/kernel-rt<0:4.18.0-193.37.1.rt13.87.el8_2

redhat/kernel<0:4.18.0-193.37.1.el8_2

and 122 more

● CVE-2020-12723

Perl. This issue was addressed with improved checks.

IBM BM Security Guardium<=11.3

IBM Security Guardium<=11.4

IBM Security Guardium<=11.5

Apple macOS Catalina<10.15.6

Apple Mojave

Apple High Sierra

and 21 more

● CVE-2020-10543

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.

IBM BM Security Guardium<=11.3

IBM Security Guardium<=11.4

IBM Security Guardium<=11.5

Perl Perl<5.30.3

Fedoraproject Fedora=31

openSUSE Leap=15.1

and 20 more

● CVE-2020-24394

In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs bec...

redhat/kernel-rt<0:3.10.0-1160.11.1.rt56.1145.el7

redhat/kernel<0:3.10.0-1160.11.1.el7

redhat/kernel<0:3.10.0-693.82.1.el7

redhat/kernel<0:3.10.0-957.70.1.el7

redhat/kernel<0:3.10.0-1062.45.1.el7

redhat/kernel-rt<0:4.18.0-305.rt7.72.el8

and 93 more

● CVE-2020-12771

An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.

ubuntu/linux<4.15.0-115.116

ubuntu/linux<5.4.0-45.49

ubuntu/linux<5.8~

ubuntu/linux<4.4.0-187.217

ubuntu/linux-aws<4.15.0-1080.84

ubuntu/linux-aws<5.4.0-1022.22

and 146 more

● CVE-2020-25649

A flaw was found in FasterXML Jackson Databind which did not have entity expansion secured properly making it vulnerable to XML external entity (XXE). This vulnerability is similar to <a href="https:...

redhat/eap7-jackson-databind<0:2.10.4-1.redhat_00002.1.el6ea

redhat/eap7-activemq-artemis<0:2.9.0-6.redhat_00016.1.el6ea

redhat/eap7-fge-btf<0:1.2.0-1.redhat_00007.1.el6ea

redhat/eap7-fge-msg-simple<0:1.1.0-1.redhat_00007.1.el6ea

redhat/eap7-hal-console<0:3.2.11-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.21-1.Final_redhat_00001.1.el6ea

and 147 more

● CVE-2019-19922

kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generat...

redhat/kernel-alt<0:4.14.0-115.19.1.el7a

redhat/kernel-rt<0:4.18.0-193.rt13.51.el8

redhat/kernel<0:4.18.0-193.el8

ubuntu/linux<4.15.0-69.78

ubuntu/linux<5.0.0-38.41

ubuntu/linux<5.3.0-24.26

and 79 more

● CVE-2019-5108

An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for station...

redhat/kernel-rt<0:3.10.0-1127.19.1.rt56.1116.el7

redhat/kernel<0:3.10.0-1127.el7

redhat/kernel-alt<0:4.14.0-115.19.1.el7a

redhat/kernel-rt<0:4.18.0-193.rt13.51.el8

redhat/kernel<0:4.18.0-193.el8

ubuntu/linux<4.15.0-88.88

and 91 more

● CVE-2019-19535

In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042.

Linux Linux kernel<5.2.9

Debian Debian Linux=8.0

openSUSE Leap=15.1

Oracle SD-WAN Edge=8.2

● CVE-2019-19052

A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submi...

ubuntu/linux<4.15.0-74.84

ubuntu/linux<5.0.0-38.41

ubuntu/linux<5.3.0-26.28

ubuntu/linux<5.4~

ubuntu/linux<4.4.0-171.200

ubuntu/linux-aws<4.15.0-1057.59

and 118 more

● CVE-2019-19063

Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka...

redhat/kernel-rt<0:3.10.0-1160.rt56.1131.el7

redhat/kernel<0:3.10.0-1160.el7

redhat/kernel-rt<0:4.18.0-240.rt7.54.el8

redhat/kernel<0:4.18.0-240.el8

ubuntu/linux<4.15.0-88.88

ubuntu/linux<5.3.0-40.32

and 116 more

● CVE-2019-14821

An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ri...

redhat/kernel<0:2.6.32-754.25.1.el6

redhat/kernel-rt<0:3.10.0-1062.7.1.rt56.1030.el7

redhat/kernel<0:3.10.0-1062.7.1.el7

redhat/kernel-alt<0:4.14.0-115.16.1.el7a

redhat/kernel<0:3.10.0-957.56.1.el7

redhat/kernel-rt<0:4.18.0-147.rt24.93.el8

and 149 more

● CVE-2019-15218

An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver.

ubuntu/linux<4.15.0-60.67

ubuntu/linux<5.0.0-31.33

ubuntu/linux<5.2~

ubuntu/linux<4.4.0-157.185

ubuntu/linux-aws<4.15.0-1047.49

ubuntu/linux-aws<5.0.0-1018.20

and 77 more

● CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This...

redhat/eap7-apache-cxf<0:3.2.11-1.redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-6.SP3_redhat_00004.1.el6ea

redhat/eap7-hal-console<0:3.0.19-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.14-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.18-1.Final_redhat_00001.1.el6ea

redhat/eap7-jackson-annotations<0:2.9.10-1.redhat_00003.1.el6ea

and 779 more

● CVE-2019-1010238

Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embeddin...

Gnome Pango>=1.42.0<=1.44

Oracle SD-WAN Edge=7.3

Oracle SD-WAN Edge=8.0

Oracle SD-WAN Edge=8.1

Oracle SD-WAN Edge=8.2

Fedoraproject Fedora=29

and 24 more

● CVE-2019-3900

An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets fa...

redhat/kernel<0:2.6.32-754.24.2.el6

redhat/kernel-rt<0:3.10.0-1062.rt56.1022.el7

redhat/kernel-alt<0:4.14.0-115.10.1.el7a

redhat/kernel<0:3.10.0-1062.el7

redhat/kernel<0:3.10.0-693.61.1.el7

redhat/kernel<0:3.10.0-862.44.2.el7

and 114 more

Latest oracle sd-wan edge Vulnerabilities

Company

Resources

Contact