bookkeeper Archives - CVE Vulnerability

CVE-2020-36230

Sun, 26 Feb 2023 06:41:34 +0000

A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.

The post CVE-2020-36230 appeared first on CVE Vulnerability.

CVE-2020-23922

Sun, 26 Feb 2023 06:39:21 +0000

An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read.

The post CVE-2020-23922 appeared first on CVE Vulnerability.

CVE-2019-19924

Sun, 26 Feb 2023 06:32:15 +0000

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.

The post CVE-2019-19924 appeared first on CVE Vulnerability.

CVE-2019-17571

Sun, 26 Feb 2023 06:31:37 +0000

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.

The post CVE-2019-17571 appeared first on CVE Vulnerability.

CVE-2022-32531

godfreyd94 — Thu, 23 Feb 2023 05:19:05 +0000

The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack. The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.

The post CVE-2022-32531 appeared first on CVE Vulnerability.