[Bug 1443585] New: CVE-2017-5661 fop: XML external entity processing vulnerability
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1443585
Bug ID: 1443585
Summary: CVE-2017-5661 fop: XML external entity processing
vulnerability
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: bmcclain(a)redhat.com, c.david86(a)gmail.com,
dblechte(a)redhat.com, eedri(a)redhat.com,
gklein(a)redhat.com, java-maint(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
lsurette(a)redhat.com, mgoldboi(a)redhat.com,
michal.skrivanek(a)redhat.com, mizdebsk(a)redhat.com,
msimacek(a)redhat.com, rbalakri(a)redhat.com,
rhbugs(a)n-dimensional.de, Rhev-m-bugs(a)redhat.com,
r.landmann(a)redhat.com, sbonazzo(a)redhat.com,
sherold(a)redhat.com, srevivo(a)redhat.com,
ydary(a)redhat.com, ykaul(a)redhat.com
In Apache FOP before 2.2, files lying on the filesystem of the server which
uses FOP can be revealed to arbitrary users who send maliciously formed SVG
files. The file types that can be shown depend on the user context in which the
exploitable application is running. If the user is root a full compromise of
the server - including confidential or sensitive files - would be possible. XXE
can also be used to attack the availability of the server via denial of service
as the references within a xml document can trivially trigger an amplification
attack.
References:
https://xmlgraphics.apache.org/security.html
http://seclists.org/oss-sec/2017/q2/86
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 1 month
[Bug 1443592] New: CVE-2017-5662 batik: XML external entity processing vulnerability
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1443592
Bug ID: 1443592
Summary: CVE-2017-5662 batik: XML external entity processing
vulnerability
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: bmcclain(a)redhat.com, c.david86(a)gmail.com,
dblechte(a)redhat.com, eedri(a)redhat.com,
hhorak(a)redhat.com, java-maint(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jorton(a)redhat.com, jvanek(a)redhat.com,
mgoldboi(a)redhat.com, michal.skrivanek(a)redhat.com,
mizdebsk(a)redhat.com, msimacek(a)redhat.com,
sbonazzo(a)redhat.com, sherold(a)redhat.com,
ydary(a)redhat.com, ykaul(a)redhat.com
In Apache Batik before 1.9, files lying on the filesystem of the server which
uses batik can be revealed to arbitrary users who send maliciously formed SVG
files. The file types that can be shown depend on the user context in which the
exploitable application is running. If the user is root a full compromise of
the server - including confidential or sensitive files - would be possible. XXE
can also be used to attack the availability of the server via denial of service
as the references within a xml document can trivially trigger an amplification
attack.
References:
https://xmlgraphics.apache.org/security.html
http://seclists.org/oss-sec/2017/q2/85
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 1 month
[Bug 1550671] CVE-2018-1067 undertow: HTTP header injection using CRLF with UTF-8 Encoding ( incomplete fix of CVE-2016-4993)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1550671
Kunjan Rathod <krathod(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0425:1751,reported=20180301 |0425:1751,reported=20180301
|,source=researcher,cvss2=5. |,source=researcher,cvss2=5.
|8/AV:N/AC:M/Au:N/C:P/I:P/A: |8/AV:N/AC:M/Au:N/C:P/I:P/A:
|N,cvss3=5.4/CVSS:3.0/AV:N/A |N,cvss3=5.4/CVSS:3.0/AV:N/A
|C:L/PR:N/UI:R/S:U/C:L/I:L/A |C:L/PR:N/UI:R/S:U/C:L/I:L/A
|:N,cwe=CWE-113,fedora-all/w |:N,cwe=CWE-113,fedora-all/w
|ildfly=affected,eap-6/jboss |ildfly=affected,eap-6/jboss
|web=new,eap-7/undertow=affe |web=notaffected,eap-7/under
|cted,openshift-1/jbossweb=a |tow=affected,openshift-1/jb
|ffected,rhel-6/tomcat6=nota |ossweb=affected,rhel-6/tomc
|ffected,rhel-7/tomcat=notaf |at6=notaffected,rhel-7/tomc
|fected,jbews-2/tomcat7=new, |at=notaffected,jbews-2/tomc
|jbews-2/tomcat6=new,eap-7/w |at7=new,jbews-2/tomcat6=new
|ildfly=new,jdg-7/wildfly=ne |,eap-7/wildfly=new,jdg-7/wi
|w,rhel-8/wildfly-core=new,r |ldfly=new,rhel-8/wildfly-co
|hev-m-4/eap7-wildfly=new,rh |re=new,rhev-m-4/eap7-wildfl
|sso-7/wildfly=new,jdg-6/jbo |y=new,rhsso-7/wildfly=new,j
|ssweb=new,eap-5/jbossweb=ne |dg-6/jbossweb=new,eap-5/jbo
|w,brms-5/jbossweb=wontfix,s |ssweb=new,brms-5/jbossweb=w
|oap-5/jbossweb=wontfix,fsw- |ontfix,soap-5/jbossweb=wont
|6/jbossweb=wontfix,fuse-6/j |fix,fsw-6/jbossweb=wontfix,
|bossweb=new,fedora-all/tomc |fuse-6/jbossweb=new,fedora-
|at=affected,epel-6/tomcat=n |all/tomcat=affected,epel-6/
|ew,rhel-5/tomcat5=notaffect |tomcat=new,rhel-5/tomcat5=n
|ed,rhel-8/tomcat=notaffecte |otaffected,rhel-8/tomcat=no
|d,rhscl-3/rh-java-common-to |taffected,rhscl-3/rh-java-c
|mcat=notaffected,swarm-7/un |ommon-tomcat=notaffected,sw
|dertow=new,fedora-all/under |arm-7/undertow=new,fedora-a
|tow=new,rhev-m-4/eap7-under |ll/undertow=new,rhev-m-4/ea
|tow=new,rhel-8/undertow=new |p7-undertow=new,rhel-8/unde
| |rtow=new
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 1 month