jboss_core_services Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/jboss_core_services/ Sun, 26 Feb 2023 06:45:54 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png jboss_core_services Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/jboss_core_services/ 32 32 CVE-2018-1312 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-1312/ Sun, 26 Feb 2023 06:45:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-1312/ In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection.

The post CVE-2018-1312 appeared first on CVE Vulnerability.

]]> In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection.

The post CVE-2018-1312 appeared first on CVE Vulnerability.

]]> CVE-2020-25709 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-25709/ Sun, 26 Feb 2023 06:39:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-25709/ A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.

The post CVE-2020-25709 appeared first on CVE Vulnerability.

]]> A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.

The post CVE-2020-25709 appeared first on CVE Vulnerability.

]]> CVE-2019-0197 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-0197/ Sun, 26 Feb 2023 06:28:39 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-0197/ A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never […]

The post CVE-2019-0197 appeared first on CVE Vulnerability.

]]> A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set “H2Upgrade on” are unaffected by this issue.

The post CVE-2019-0197 appeared first on CVE Vulnerability.

]]> CVE-2021-3537 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-3537/ Thu, 23 Feb 2023 14:10:29 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-3537/ A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system […]

The post CVE-2021-3537 appeared first on CVE Vulnerability.

]]> A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.

The post CVE-2021-3537 appeared first on CVE Vulnerability.

]]> CVE-2021-3541 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-3541/ Thu, 23 Feb 2023 14:10:29 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-3541/ A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.

The post CVE-2021-3541 appeared first on CVE Vulnerability.

]]> A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.

The post CVE-2021-3541 appeared first on CVE Vulnerability.

]]> CVE-2021-3516 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-3516/ Thu, 23 Feb 2023 14:10:27 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-3516/ There’s a flaw in libxml2’s xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.

The post CVE-2021-3516 appeared first on CVE Vulnerability.

]]> There’s a flaw in libxml2’s xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.

The post CVE-2021-3516 appeared first on CVE Vulnerability.

]]> CVE-2021-3517 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-3517/ Thu, 23 Feb 2023 14:10:27 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-3517/ There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, […]

The post CVE-2021-3517 appeared first on CVE Vulnerability.

]]> There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.

The post CVE-2021-3517 appeared first on CVE Vulnerability.

]]> CVE-2021-3518 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-3518/ Thu, 23 Feb 2023 14:10:27 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-3518/ There’s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

The post CVE-2021-3518 appeared first on CVE Vulnerability.

]]> There’s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

The post CVE-2021-3518 appeared first on CVE Vulnerability.

]]>