{"grype_matches":[{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.99"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-83qj-6fr2-vhqg","versionConstraint":">=9.0.0.M1,<9.0.99 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-83qj-6fr2-vhqg","fix":{"state":"fixed","versions":["9.0.99"],"available":[{"date":"2025-03-18","kind":"first-observed","version":"9.0.99"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A","metrics":{"baseScore":9.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-24813","cwe":"CWE-44","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2025-24813","cwe":"CWE-502","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2025-24813","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2025-24813","cwe":"CWE-706","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-24813","date":"2026-10-08","epss":0.99927,"percentile":0.99969}],"risk":97.125,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-24813","https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq","http://www.openwall.com/lists/oss-security/2025/03/10/5","https://github.com/apache/tomcat/commit/0a668e0c27f2b7ca0cc7c6eea32253b9b5ecb29c","https://github.com/apache/tomcat/commit/eb61aade8f8daccaecabf07d428b877975622f72","https://github.com/apache/tomcat/commit/f6c01d6577cf9a1e06792be47e623d36acc3b5dc","https://github.com/absholi7ly/POC-CVE-2025-24813/blob/main/README.md","https://www.vicarius.io/vsociety/posts/cve-2025-24813-detect-apache-tomcat-rce","https://www.vicarius.io/vsociety/posts/cve-2025-24813-mitigate-apache-tomcat-rce","https://security.netapp.com/advisory/ntap-20250321-0001","https://lists.debian.org/debian-lts-announce/2025/04/msg00003.html","https://www.vicarius.io/vsociety/posts/cve-2025-24813-tomcat-detect-vulnerability","https://www.vicarius.io/vsociety/posts/cve-2025-24813-tomcat-mitigation-vulnerability","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24813"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-83qj-6fr2-vhqg","description":"Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT","knownExploited":[{"cve":"CVE-2025-24813","cwes":["CWE-44","CWE-502"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-24813"],"notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq","dueDate":"2025-04-22","product":"Tomcat","dateAdded":"2025-04-01","vendorProject":"Apache","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2025-24813","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":10,"impactScore":6.1,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-24813","cwe":"CWE-44","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2025-24813","cwe":"CWE-502","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2025-24813","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2025-24813","cwe":"CWE-706","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-24813","date":"2026-10-08","epss":0.99927,"percentile":0.99969}],"urls":["https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq","http://www.openwall.com/lists/oss-security/2025/03/10/5","https://lists.debian.org/debian-lts-announce/2025/04/msg00003.html","https://security.netapp.com/advisory/ntap-20250321-0001/","https://www.vicarius.io/vsociety/posts/cve-2025-24813-detect-apache-tomcat-rce","https://www.vicarius.io/vsociety/posts/cve-2025-24813-mitigate-apache-tomcat-rce","https://www.vicarius.io/vsociety/posts/cve-2025-24813-tomcat-detect-vulnerability","https://www.vicarius.io/vsociety/posts/cve-2025-24813-tomcat-mitigation-vulnerability","https://github.com/absholi7ly/POC-CVE-2025-24813/blob/main/README.md","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24813"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-24813","description":"Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98.\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions \nmay also be affected.\n\n\nIf all of the following were true, a malicious user was able to view       security sensitive files and/or inject content into those files:\n- writes enabled for the default servlet (disabled by default)\n- support for partial PUT (enabled by default)\n- a target URL for security sensitive uploads that was a sub-directory of a target URL for public uploads\n- attacker knowledge of the names of security sensitive files being uploaded\n- the security sensitive files also being uploaded via partial PUT\n\nIf all of the following were true, a malicious user was able to       perform remote code execution:\n- writes enabled for the default servlet (disabled by default)\n- support for partial PUT (enabled by default)\n- application was using Tomcat's file based session persistence with the default storage location\n- application included a library that may be leveraged in a deserialization attack\n\nUsers are recommended to upgrade to version 11.0.3, 10.1.35 or 9.0.99, which fixes the issue.","knownExploited":[{"cve":"CVE-2025-24813","cwes":["CWE-44","CWE-502"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-24813"],"notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq","dueDate":"2025-04-22","product":"Tomcat","dateAdded":"2025-04-01","vendorProject":"Apache","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-14847","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-14847","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-14847","cwe":"CWE-130","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2025-14847","date":"2026-10-08","epss":0.83218,"percentile":0.99673}],"risk":78.75000000000001,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-14847","knownExploited":[{"cve":"CVE-2025-14847","cwes":["CWE-130"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-14847"],"notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://jira.mongodb.org/browse/SERVER-115508","dueDate":"2026-01-19","product":"MongoDB and MongoDB Server","dateAdded":"2025-12-29","vendorProject":"MongoDB","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2025-14847","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-14847","cwe":"CWE-130","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2025-14847","date":"2026-10-08","epss":0.83218,"percentile":0.99673}],"urls":["https://jira.mongodb.org/browse/SERVER-115508","http://www.openwall.com/lists/oss-security/2025/12/29/21","https://www.smartkeyss.com/post/mongobleed-pre-auth-memory-disclosure-via-op_compressed-in-mongodb-cve-2025-14847","https://www.vicarius.io/vsociety/posts/cve-2025-14847-detection-script-heap-memory-exposure-in-mongodb-server","https://www.vicarius.io/vsociety/posts/cve-2025-14847-mitigation-script-heap-memory-exposure-in-mongodb-server","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-14847"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-14847","description":"Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue affects all MongoDB Server v7.0 prior to 7.0.28 versions, MongoDB Server v8.0 versions prior to 8.0.17, MongoDB Server v8.2 versions prior to 8.2.3, MongoDB Server v6.0 versions prior to 6.0.27, MongoDB Server v5.0 versions prior to 5.0.32, MongoDB Server v4.4 versions prior to 4.4.30, MongoDB Server v4.2 versions greater than or equal to 4.2.0, MongoDB Server v4.0 versions greater than or equal to 4.0.0, and MongoDB Server v3.6 versions greater than or equal to 3.6.0.","knownExploited":[{"cve":"CVE-2025-14847","cwes":["CWE-130"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-14847"],"notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://jira.mongodb.org/browse/SERVER-115508","dueDate":"2026-01-19","product":"MongoDB and MongoDB Server","dateAdded":"2025-12-29","vendorProject":"MongoDB","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-14847","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-14847","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-14847","cwe":"CWE-130","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2025-14847","date":"2026-10-08","epss":0.83218,"percentile":0.99673}],"risk":78.75000000000001,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-14847","knownExploited":[{"cve":"CVE-2025-14847","cwes":["CWE-130"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-14847"],"notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://jira.mongodb.org/browse/SERVER-115508","dueDate":"2026-01-19","product":"MongoDB and MongoDB Server","dateAdded":"2025-12-29","vendorProject":"MongoDB","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2025-14847","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-14847","cwe":"CWE-130","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2025-14847","date":"2026-10-08","epss":0.83218,"percentile":0.99673}],"urls":["https://jira.mongodb.org/browse/SERVER-115508","http://www.openwall.com/lists/oss-security/2025/12/29/21","https://www.smartkeyss.com/post/mongobleed-pre-auth-memory-disclosure-via-op_compressed-in-mongodb-cve-2025-14847","https://www.vicarius.io/vsociety/posts/cve-2025-14847-detection-script-heap-memory-exposure-in-mongodb-server","https://www.vicarius.io/vsociety/posts/cve-2025-14847-mitigation-script-heap-memory-exposure-in-mongodb-server","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-14847"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-14847","description":"Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue affects all MongoDB Server v7.0 prior to 7.0.28 versions, MongoDB Server v8.0 versions prior to 8.0.17, MongoDB Server v8.2 versions prior to 8.2.3, MongoDB Server v6.0 versions prior to 6.0.27, MongoDB Server v5.0 versions prior to 5.0.32, MongoDB Server v4.4 versions prior to 4.4.30, MongoDB Server v4.2 versions greater than or equal to 4.2.0, MongoDB Server v4.0 versions greater than or equal to 4.0.0, and MongoDB Server v3.6 versions greater than or equal to 3.6.0.","knownExploited":[{"cve":"CVE-2025-14847","cwes":["CWE-130"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-14847"],"notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://jira.mongodb.org/browse/SERVER-115508","dueDate":"2026-01-19","product":"MongoDB and MongoDB Server","dateAdded":"2025-12-29","vendorProject":"MongoDB","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-14847","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-14847","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-14847","cwe":"CWE-130","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2025-14847","date":"2026-10-08","epss":0.83218,"percentile":0.99673}],"risk":78.75000000000001,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-14847","knownExploited":[{"cve":"CVE-2025-14847","cwes":["CWE-130"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-14847"],"notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://jira.mongodb.org/browse/SERVER-115508","dueDate":"2026-01-19","product":"MongoDB and MongoDB Server","dateAdded":"2025-12-29","vendorProject":"MongoDB","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2025-14847","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-14847","cwe":"CWE-130","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2025-14847","date":"2026-10-08","epss":0.83218,"percentile":0.99673}],"urls":["https://jira.mongodb.org/browse/SERVER-115508","http://www.openwall.com/lists/oss-security/2025/12/29/21","https://www.smartkeyss.com/post/mongobleed-pre-auth-memory-disclosure-via-op_compressed-in-mongodb-cve-2025-14847","https://www.vicarius.io/vsociety/posts/cve-2025-14847-detection-script-heap-memory-exposure-in-mongodb-server","https://www.vicarius.io/vsociety/posts/cve-2025-14847-mitigation-script-heap-memory-exposure-in-mongodb-server","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-14847"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-14847","description":"Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue affects all MongoDB Server v7.0 prior to 7.0.28 versions, MongoDB Server v8.0 versions prior to 8.0.17, MongoDB Server v8.2 versions prior to 8.2.3, MongoDB Server v6.0 versions prior to 6.0.27, MongoDB Server v5.0 versions prior to 5.0.32, MongoDB Server v4.4 versions prior to 4.4.30, MongoDB Server v4.2 versions greater than or equal to 4.2.0, MongoDB Server v4.0 versions greater than or equal to 4.0.0, and MongoDB Server v3.6 versions greater than or equal to 3.6.0.","knownExploited":[{"cve":"CVE-2025-14847","cwes":["CWE-130"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-14847"],"notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://jira.mongodb.org/browse/SERVER-115508","dueDate":"2026-01-19","product":"MongoDB and MongoDB Server","dateAdded":"2025-12-29","vendorProject":"MongoDB","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"ecdba12e72372c34","cpes":["cpe:2.3:a:org.yaml.snakeyaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:snakeyaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:org.yaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:yaml:snakeyaml:1.30:*:*:*:*:*:*:*"],"name":"snakeyaml","purl":"pkg:maven/org.yaml/snakeyaml@1.30","type":"java-archive","version":"1.30","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.yaml","virtualPath":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","manifestName":"","pomArtifactID":"snakeyaml","archiveDigests":[{"value":"8fde7fe2586328ac3c68db92045e1c8759125000","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mjmj-j48q-9wg2","versionConstraint":"<=1.33 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.yaml:snakeyaml","version":"1.30"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-mjmj-j48q-9wg2","fix":{"state":"fixed","versions":["2.0"],"available":[{"date":"2023-03-05","kind":"first-observed","version":"2.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":8.3,"impactScore":5.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1471","cwe":"CWE-20","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-1471","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1471","date":"2026-10-08","epss":0.99569,"percentile":0.99946}],"risk":78.65951,"urls":["https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2","https://nvd.nist.gov/vuln/detail/CVE-2022-1471","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64634374","https://bitbucket.org/snakeyaml/snakeyaml/wiki/CVE-2022-1471","https://github.com/mbechler/marshalsec","https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true","https://bitbucket.org/snakeyaml/snakeyaml/commits/5014df1a36f50aca54405bb8433bc99a8847f758","https://bitbucket.org/snakeyaml/snakeyaml/commits/acc44099f5f4af26ff86b4e4e4cc1c874e2dc5c4","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64876314","https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc","http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html","http://www.openwall.com/lists/oss-security/2023/11/19/1","https://security.netapp.com/advisory/ntap-20230818-0015","https://security.netapp.com/advisory/ntap-20240621-0006","https://snyk.io/blog/unsafe-deserialization-snakeyaml-java-cve-2022-1471","https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html","https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mjmj-j48q-9wg2","description":"SnakeYaml Constructor Deserialization Remote Code Execution"},"relatedVulnerabilities":[{"id":"CVE-2022-1471","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","metrics":{"baseScore":8.3,"impactScore":5.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1471","cwe":"CWE-20","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-1471","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1471","date":"2026-10-08","epss":0.99569,"percentile":0.99946}],"urls":["http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html","http://www.openwall.com/lists/oss-security/2023/11/19/1","https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479","https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html","https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2","https://github.com/mbechler/marshalsec","https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc","https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c","https://security.netapp.com/advisory/ntap-20230818-0015/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1471","description":"SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond."}]},{"artifact":{"id":"16b8b8f03be333e3","cpes":["cpe:2.3:a:apache:commons-beanutils:1.9.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_beanutils:1.9.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:beanutils:1.9.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:1.9.2:*:*:*:*:*:*:*"],"name":"commons-beanutils","purl":"pkg:maven/commons-beanutils/commons-beanutils@1.9.2","type":"java-archive","version":"1.9.2","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"commons-beanutils","virtualPath":"/usr/lib/unifi/lib/commons-beanutils-1.9.2.jar","manifestName":"","pomArtifactID":"commons-beanutils","archiveDigests":[{"value":"7a87d845ad3a155297e8f67d9008f4c1e5656b71","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/commons-beanutils-1.9.2.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/commons-beanutils-1.9.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.9.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-p66x-2cv9-qq3v","versionConstraint":">=1.8.0,<1.9.4 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"commons-beanutils:commons-beanutils","version":"1.9.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-p66x-2cv9-qq3v","fix":{"state":"fixed","versions":["1.9.4"],"available":[{"date":"2024-06-06","kind":"first-observed","version":"1.9.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2014-0114","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-0114","date":"2026-10-08","epss":0.99032,"percentile":0.99931}],"risk":74.274,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2014-0114","https://access.redhat.com/errata/RHSA-2018:2669","https://access.redhat.com/errata/RHSA-2019:2995","https://access.redhat.com/solutions/869353","https://bugzilla.redhat.com/show_bug.cgi?id=1091938","https://bugzilla.redhat.com/show_bug.cgi?id=1116665","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755","https://issues.apache.org/jira/browse/BEANUTILS-463","https://lists.apache.org/thread.html/0340493a1ddf3660dee09a5c503449cdac5bec48cdc478de65858859@%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/080af531a9113e29d3f6a060e3f992dc9f40315ec7234e15c3b339e3@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/084ae814e69178d2ce174cfdf149bc6e46d7524f3308c08d3adb43cb@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/098e9aae118ac5c06998a9ba4544ab2475162981d290fdef88e6f883@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/09981ae3df188a2ad1ce20f62ef76a5b2d27cf6b9ebab366cf1d6cc6@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/0a35108a56e2d575e3b3985588794e39fbf264097aba66f4c5569e4f@%3Cuser.commons.apache.org%3E","https://lists.apache.org/thread.html/0efed939139f5b9dcd62b8acf7cb8a9789227d14abdc0c6f141c4a4c@%3Cissues.activemq.apache.org%3E","https://lists.apache.org/thread.html/1565e8b786dff4cb3b48ecc8381222c462c92076c9e41408158797b5@%3Ccommits.commons.apache.org%3E","https://lists.apache.org/thread.html/15fcdf27fa060de276edc0b4098526afc21c236852eb3de9be9594f3@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/1f78f1e32cc5614ec0c5b822ba4bd7fc8e8b5c46c8e038b6bd609cb5@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/2454e058fd05ba30ca29442fdeb7ea47505d47a888fbc9f3a53f31d0@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/2ba22f2e3de945039db735cf6cbf7f8be901ab2537337c7b1dd6a0f0@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/31f9dc2c9cb68e390634a4202f84b8569f64b6569bfcce46348fd9fd@%3Ccommits.commons.apache.org%3E","https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3@%3Cdevnull.infra.apache.org%3E","https://lists.apache.org/thread.html/3f500972dceb48e3cb351f58565aecf6728b1ea7a69593af86c30b30@%3Cissues.activemq.apache.org%3E","https://lists.apache.org/thread.html/40fc236a35801a535cd49cf1979dbeab034b833c63a284941bce5bf1@%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/42ad6326d62ea8453d0d0ce12eff39bbb7c5b4fca9639da007291346@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/4c3fd707a049bfe0577dba8fc9c4868ffcdabe68ad86586a0a49242e@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/65b39fa6d700e511927e5668a4038127432178a210aff81500eb36e5@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/66176fa3caeca77058d9f5b0316419a43b4c3fa2b572e05b87132226@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/6afe2f935493e69a332b9c5a4f23cafe95c15ede1591a492cf612293@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/6b30629b32d020c40d537f00b004d281c37528d471de15ca8aec2cd4@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/869c08899f34c1a70c9fb42f92ac0d043c98781317e0c19d7ba3f5e3@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/88c497eead24ed517a2bb3159d3dc48725c215e97fe7a98b2cf3ea25@%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/8e2bdfabd5b14836aa3cf900aa0a62ff9f4e22a518bb4e553ebcf55f@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/918ec15a80fc766ff46c5d769cb8efc88fed6674faadd61a7105166b@%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/956995acee0d8bc046f1df0a55b7fbeb65dd2f82864e5de1078bacb0@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/97fc033dad4233a5d82fcb75521eabdd23dd99ef32eb96f407f96a1a@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/9b5505632f5683ee17bda4f7878525e672226c7807d57709283ffa64@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/aa4ca069c7aea5b1d7329bc21576c44a39bcc4eb7bb2760c4b16f2f6@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/c24c0b931632a397142882ba248b7bd440027960f22845c6f664c639@%3Ccommits.commons.apache.org%3E","https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/c7e31c3c90b292e0bafccc4e1b19c9afc1503a65d82cb7833dfd7478@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/cee6b1c4533be1a753614f6a7d7c533c42091e7cafd7053b8f62792a@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/d27c51b3c933f885460aa6d3004eb228916615caaaddbb8e8bfeeb40@%3Cgitbox.activemq.apache.org%3E","https://lists.apache.org/thread.html/df093c662b5e49fe9e38ef91f78ffab09d0839dea7df69a747dffa86@%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/df1c385f2112edffeff57a6b21d12e8d24031a9f578cb8ba22a947a8@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/ebc4f019798f6ce2a39f3e0c26a9068563a9ba092cdf3ece398d4e2f@%3Cnotifications.commons.apache.org%3E","https://lists.apache.org/thread.html/f3682772e62926b5c009eed63c62767021be6da0bb7427610751809f@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/fda473f46e51019a78ab217a7a3a3d48dafd90846e75bd5536ef72f3@%3Cnotifications.commons.apache.org%3E","https://lists.apache.org/thread.html/ffde3f266d3bde190b54c9202169e7918a92de7e7e0337d792dc7263@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/r75d67108e557bb5d4c4318435067714a0180de525314b7e8dab9d04e@%3Cissues.activemq.apache.org%3E","https://security.gentoo.org/glsa/201607-09","https://snyk.io/vuln/SNYK-JAVA-COMMONSBEANUTILS-30077","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","http://advisories.mageia.org/MGASA-2014-0219.html","http://apache-ignite-developers.2346864.n4.nabble.com/CVE-2014-0114-Apache-Ignite-is-vulnerable-to-existing-CVE-2014-0114-td31205.html","http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt","http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136958.html","http://marc.info/?l=bugtraq&m=140119284401582&w=2","http://marc.info/?l=bugtraq&m=140801096002766&w=2","http://marc.info/?l=bugtraq&m=141451023707502&w=2","http://openwall.com/lists/oss-security/2014/06/15/10","http://openwall.com/lists/oss-security/2014/07/08/1","http://seclists.org/fulldisclosure/2014/Dec/23","http://www-01.ibm.com/support/docview.wss?uid=swg21674128","http://www-01.ibm.com/support/docview.wss?uid=swg21674812","http://www-01.ibm.com/support/docview.wss?uid=swg21675266","http://www-01.ibm.com/support/docview.wss?uid=swg21675387","http://www-01.ibm.com/support/docview.wss?uid=swg21675689","http://www-01.ibm.com/support/docview.wss?uid=swg21675898","http://www-01.ibm.com/support/docview.wss?uid=swg21675972","http://www-01.ibm.com/support/docview.wss?uid=swg21676091","http://www-01.ibm.com/support/docview.wss?uid=swg21676110","http://www-01.ibm.com/support/docview.wss?uid=swg21676303","http://www-01.ibm.com/support/docview.wss?uid=swg21676375","http://www-01.ibm.com/support/docview.wss?uid=swg21676931","http://www-01.ibm.com/support/docview.wss?uid=swg21677110","http://www-01.ibm.com/support/docview.wss?uid=swg27042296","http://www.debian.org/security/2014/dsa-2940","http://www.ibm.com/support/docview.wss?uid=swg21675496","http://www.mandriva.com/security/advisories?name=MDVSA-2014:095","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","http://www.vmware.com/security/advisories/VMSA-2014-0008.html","http://www.vmware.com/security/advisories/VMSA-2014-0012.html","https://lists.apache.org/thread.html/0340493a1ddf3660dee09a5c503449cdac5bec48cdc478de65858859%40%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/080af531a9113e29d3f6a060e3f992dc9f40315ec7234e15c3b339e3%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/084ae814e69178d2ce174cfdf149bc6e46d7524f3308c08d3adb43cb%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/098e9aae118ac5c06998a9ba4544ab2475162981d290fdef88e6f883%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/09981ae3df188a2ad1ce20f62ef76a5b2d27cf6b9ebab366cf1d6cc6%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/0a35108a56e2d575e3b3985588794e39fbf264097aba66f4c5569e4f%40%3Cuser.commons.apache.org%3E","https://lists.apache.org/thread.html/0efed939139f5b9dcd62b8acf7cb8a9789227d14abdc0c6f141c4a4c%40%3Cissues.activemq.apache.org%3E","https://lists.apache.org/thread.html/1565e8b786dff4cb3b48ecc8381222c462c92076c9e41408158797b5%40%3Ccommits.commons.apache.org%3E","https://lists.apache.org/thread.html/15fcdf27fa060de276edc0b4098526afc21c236852eb3de9be9594f3%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/1f78f1e32cc5614ec0c5b822ba4bd7fc8e8b5c46c8e038b6bd609cb5%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/2454e058fd05ba30ca29442fdeb7ea47505d47a888fbc9f3a53f31d0%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/2ba22f2e3de945039db735cf6cbf7f8be901ab2537337c7b1dd6a0f0%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/31f9dc2c9cb68e390634a4202f84b8569f64b6569bfcce46348fd9fd%40%3Ccommits.commons.apache.org%3E","https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3%40%3Cdevnull.infra.apache.org%3E","https://lists.apache.org/thread.html/3f500972dceb48e3cb351f58565aecf6728b1ea7a69593af86c30b30%40%3Cissues.activemq.apache.org%3E","https://lists.apache.org/thread.html/40fc236a35801a535cd49cf1979dbeab034b833c63a284941bce5bf1%40%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/42ad6326d62ea8453d0d0ce12eff39bbb7c5b4fca9639da007291346%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/4c3fd707a049bfe0577dba8fc9c4868ffcdabe68ad86586a0a49242e%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/65b39fa6d700e511927e5668a4038127432178a210aff81500eb36e5%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/66176fa3caeca77058d9f5b0316419a43b4c3fa2b572e05b87132226%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/6afe2f935493e69a332b9c5a4f23cafe95c15ede1591a492cf612293%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/6b30629b32d020c40d537f00b004d281c37528d471de15ca8aec2cd4%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/869c08899f34c1a70c9fb42f92ac0d043c98781317e0c19d7ba3f5e3%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/88c497eead24ed517a2bb3159d3dc48725c215e97fe7a98b2cf3ea25%40%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/8e2bdfabd5b14836aa3cf900aa0a62ff9f4e22a518bb4e553ebcf55f%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/918ec15a80fc766ff46c5d769cb8efc88fed6674faadd61a7105166b%40%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/956995acee0d8bc046f1df0a55b7fbeb65dd2f82864e5de1078bacb0%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/97fc033dad4233a5d82fcb75521eabdd23dd99ef32eb96f407f96a1a%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/9b5505632f5683ee17bda4f7878525e672226c7807d57709283ffa64%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/aa4ca069c7aea5b1d7329bc21576c44a39bcc4eb7bb2760c4b16f2f6%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/c24c0b931632a397142882ba248b7bd440027960f22845c6f664c639%40%3Ccommits.commons.apache.org%3E","https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c%40%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/c7e31c3c90b292e0bafccc4e1b19c9afc1503a65d82cb7833dfd7478%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/cee6b1c4533be1a753614f6a7d7c533c42091e7cafd7053b8f62792a%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/d27c51b3c933f885460aa6d3004eb228916615caaaddbb8e8bfeeb40%40%3Cgitbox.activemq.apache.org%3E","https://lists.apache.org/thread.html/df093c662b5e49fe9e38ef91f78ffab09d0839dea7df69a747dffa86%40%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/df1c385f2112edffeff57a6b21d12e8d24031a9f578cb8ba22a947a8%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/ebc4f019798f6ce2a39f3e0c26a9068563a9ba092cdf3ece398d4e2f%40%3Cnotifications.commons.apache.org%3E","https://lists.apache.org/thread.html/f3682772e62926b5c009eed63c62767021be6da0bb7427610751809f%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/fda473f46e51019a78ab217a7a3a3d48dafd90846e75bd5536ef72f3%40%3Cnotifications.commons.apache.org%3E","https://lists.apache.org/thread.html/ffde3f266d3bde190b54c9202169e7918a92de7e7e0337d792dc7263%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/r458d61eaeadecaad04382ebe583230bc027f48d9e85e4731bc573477%40%3Ccommits.dolphinscheduler.apache.org%3E","https://lists.apache.org/thread.html/r75d67108e557bb5d4c4318435067714a0180de525314b7e8dab9d04e%40%3Cissues.activemq.apache.org%3E","https://lists.apache.org/thread.html/rf5230a049d989dbfdd404b4320a265dceeeba459a4d04ec21873bd55%40%3Csolr-user.lucene.apache.org%3E","https://web.archive.org/web/20140618110851/http://www.securityfocus.com/bid/67121","https://web.archive.org/web/20150710065242/http://www.securityfocus.com/archive/1/534161/100/0/threaded","https://github.com/apache/commons-beanutils/pull/7","https://github.com/apache/commons-beanutils/commit/62e82ad92cf4818709d6044aaf257b73d42659a4","https://security.netapp.com/advisory/ntap-20180629-0006","https://security.netapp.com/advisory/ntap-20140911-0001"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-p66x-2cv9-qq3v","description":"Arbitrary code execution in Apache Commons BeanUtils"},"relatedVulnerabilities":[{"id":"CVE-2014-0114","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2014-0114","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-0114","date":"2026-10-08","epss":0.99032,"percentile":0.99931}],"urls":["http://advisories.mageia.org/MGASA-2014-0219.html","http://apache-ignite-developers.2346864.n4.nabble.com/CVE-2014-0114-Apache-Ignite-is-vulnerable-to-existing-CVE-2014-0114-td31205.html","http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt","http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136958.html","http://marc.info/?l=bugtraq&m=140119284401582&w=2","http://marc.info/?l=bugtraq&m=140801096002766&w=2","http://marc.info/?l=bugtraq&m=141451023707502&w=2","http://openwall.com/lists/oss-security/2014/06/15/10","http://openwall.com/lists/oss-security/2014/07/08/1","http://seclists.org/fulldisclosure/2014/Dec/23","http://secunia.com/advisories/57477","http://secunia.com/advisories/58710","http://secunia.com/advisories/58851","http://secunia.com/advisories/58947","http://secunia.com/advisories/59014","http://secunia.com/advisories/59118","http://secunia.com/advisories/59228","http://secunia.com/advisories/59245","http://secunia.com/advisories/59246","http://secunia.com/advisories/59430","http://secunia.com/advisories/59464","http://secunia.com/advisories/59479","http://secunia.com/advisories/59480","http://secunia.com/advisories/59704","http://secunia.com/advisories/59718","http://secunia.com/advisories/60177","http://secunia.com/advisories/60703","http://www-01.ibm.com/support/docview.wss?uid=swg21674128","http://www-01.ibm.com/support/docview.wss?uid=swg21674812","http://www-01.ibm.com/support/docview.wss?uid=swg21675266","http://www-01.ibm.com/support/docview.wss?uid=swg21675387","http://www-01.ibm.com/support/docview.wss?uid=swg21675689","http://www-01.ibm.com/support/docview.wss?uid=swg21675898","http://www-01.ibm.com/support/docview.wss?uid=swg21675972","http://www-01.ibm.com/support/docview.wss?uid=swg21676091","http://www-01.ibm.com/support/docview.wss?uid=swg21676110","http://www-01.ibm.com/support/docview.wss?uid=swg21676303","http://www-01.ibm.com/support/docview.wss?uid=swg21676375","http://www-01.ibm.com/support/docview.wss?uid=swg21676931","http://www-01.ibm.com/support/docview.wss?uid=swg21677110","http://www-01.ibm.com/support/docview.wss?uid=swg27042296","http://www.debian.org/security/2014/dsa-2940","http://www.ibm.com/support/docview.wss?uid=swg21675496","http://www.mandriva.com/security/advisories?name=MDVSA-2014:095","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html","http://www.securityfocus.com/archive/1/534161/100/0/threaded","http://www.securityfocus.com/bid/67121","http://www.vmware.com/security/advisories/VMSA-2014-0008.html","http://www.vmware.com/security/advisories/VMSA-2014-0012.html","https://access.redhat.com/errata/RHSA-2018:2669","https://access.redhat.com/errata/RHSA-2019:2995","https://access.redhat.com/solutions/869353","https://bugzilla.redhat.com/show_bug.cgi?id=1091938","https://bugzilla.redhat.com/show_bug.cgi?id=1116665","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755","https://issues.apache.org/jira/browse/BEANUTILS-463","https://lists.apache.org/thread.html/0340493a1ddf3660dee09a5c503449cdac5bec48cdc478de65858859%40%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/080af531a9113e29d3f6a060e3f992dc9f40315ec7234e15c3b339e3%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/084ae814e69178d2ce174cfdf149bc6e46d7524f3308c08d3adb43cb%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/098e9aae118ac5c06998a9ba4544ab2475162981d290fdef88e6f883%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/09981ae3df188a2ad1ce20f62ef76a5b2d27cf6b9ebab366cf1d6cc6%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/0a35108a56e2d575e3b3985588794e39fbf264097aba66f4c5569e4f%40%3Cuser.commons.apache.org%3E","https://lists.apache.org/thread.html/0efed939139f5b9dcd62b8acf7cb8a9789227d14abdc0c6f141c4a4c%40%3Cissues.activemq.apache.org%3E","https://lists.apache.org/thread.html/1565e8b786dff4cb3b48ecc8381222c462c92076c9e41408158797b5%40%3Ccommits.commons.apache.org%3E","https://lists.apache.org/thread.html/15fcdf27fa060de276edc0b4098526afc21c236852eb3de9be9594f3%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/1f78f1e32cc5614ec0c5b822ba4bd7fc8e8b5c46c8e038b6bd609cb5%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/2454e058fd05ba30ca29442fdeb7ea47505d47a888fbc9f3a53f31d0%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/2ba22f2e3de945039db735cf6cbf7f8be901ab2537337c7b1dd6a0f0%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/31f9dc2c9cb68e390634a4202f84b8569f64b6569bfcce46348fd9fd%40%3Ccommits.commons.apache.org%3E","https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3%40%3Cdevnull.infra.apache.org%3E","https://lists.apache.org/thread.html/3f500972dceb48e3cb351f58565aecf6728b1ea7a69593af86c30b30%40%3Cissues.activemq.apache.org%3E","https://lists.apache.org/thread.html/40fc236a35801a535cd49cf1979dbeab034b833c63a284941bce5bf1%40%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/42ad6326d62ea8453d0d0ce12eff39bbb7c5b4fca9639da007291346%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/4c3fd707a049bfe0577dba8fc9c4868ffcdabe68ad86586a0a49242e%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/65b39fa6d700e511927e5668a4038127432178a210aff81500eb36e5%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/66176fa3caeca77058d9f5b0316419a43b4c3fa2b572e05b87132226%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/6afe2f935493e69a332b9c5a4f23cafe95c15ede1591a492cf612293%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/6b30629b32d020c40d537f00b004d281c37528d471de15ca8aec2cd4%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/869c08899f34c1a70c9fb42f92ac0d043c98781317e0c19d7ba3f5e3%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/88c497eead24ed517a2bb3159d3dc48725c215e97fe7a98b2cf3ea25%40%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/8e2bdfabd5b14836aa3cf900aa0a62ff9f4e22a518bb4e553ebcf55f%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/918ec15a80fc766ff46c5d769cb8efc88fed6674faadd61a7105166b%40%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/956995acee0d8bc046f1df0a55b7fbeb65dd2f82864e5de1078bacb0%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/97fc033dad4233a5d82fcb75521eabdd23dd99ef32eb96f407f96a1a%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/9b5505632f5683ee17bda4f7878525e672226c7807d57709283ffa64%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/aa4ca069c7aea5b1d7329bc21576c44a39bcc4eb7bb2760c4b16f2f6%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/c24c0b931632a397142882ba248b7bd440027960f22845c6f664c639%40%3Ccommits.commons.apache.org%3E","https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c%40%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/c7e31c3c90b292e0bafccc4e1b19c9afc1503a65d82cb7833dfd7478%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/cee6b1c4533be1a753614f6a7d7c533c42091e7cafd7053b8f62792a%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/d27c51b3c933f885460aa6d3004eb228916615caaaddbb8e8bfeeb40%40%3Cgitbox.activemq.apache.org%3E","https://lists.apache.org/thread.html/df093c662b5e49fe9e38ef91f78ffab09d0839dea7df69a747dffa86%40%3Cdev.commons.apache.org%3E","https://lists.apache.org/thread.html/df1c385f2112edffeff57a6b21d12e8d24031a9f578cb8ba22a947a8%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/ebc4f019798f6ce2a39f3e0c26a9068563a9ba092cdf3ece398d4e2f%40%3Cnotifications.commons.apache.org%3E","https://lists.apache.org/thread.html/f3682772e62926b5c009eed63c62767021be6da0bb7427610751809f%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/fda473f46e51019a78ab217a7a3a3d48dafd90846e75bd5536ef72f3%40%3Cnotifications.commons.apache.org%3E","https://lists.apache.org/thread.html/ffde3f266d3bde190b54c9202169e7918a92de7e7e0337d792dc7263%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/r458d61eaeadecaad04382ebe583230bc027f48d9e85e4731bc573477%40%3Ccommits.dolphinscheduler.apache.org%3E","https://lists.apache.org/thread.html/r75d67108e557bb5d4c4318435067714a0180de525314b7e8dab9d04e%40%3Cissues.activemq.apache.org%3E","https://lists.apache.org/thread.html/rf5230a049d989dbfdd404b4320a265dceeeba459a4d04ec21873bd55%40%3Csolr-user.lucene.apache.org%3E","https://security.gentoo.org/glsa/201607-09","https://security.netapp.com/advisory/ntap-20140911-0001/","https://security.netapp.com/advisory/ntap-20180629-0006/","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2014-0114","description":"Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to \"manipulate\" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.81"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qppj-fm5r-hxr3","versionConstraint":">=9.0.0,<9.0.81 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-qppj-fm5r-hxr3","fix":{"state":"fixed","versions":["9.0.81"],"available":[{"date":"2023-12-22","kind":"first-observed","version":"9.0.81"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:H","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:A","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-44487","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-44487","date":"2026-10-08","epss":0.99999,"percentile":0.99998}],"risk":58.275,"urls":["https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3","https://nvd.nist.gov/vuln/detail/CVE-2023-44487","https://github.com/alibaba/tengine/issues/1872","https://github.com/caddyserver/caddy/issues/5877","https://github.com/eclipse/jetty.project/issues/10679","https://github.com/haproxy/haproxy/issues/2312","https://github.com/hyperium/hyper/issues/3337","https://github.com/envoyproxy/envoy/pull/30055","https://github.com/grpc/grpc-go/pull/6703","https://github.com/nghttp2/nghttp2/pull/1961","https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61","https://bugzilla.proxmox.com/show_bug.cgi?id=4988","https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9","https://chaos.social/@icing/111210915918780532","https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack","https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764","https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2","https://github.com/bcdannyboy/CVE-2023-44487","https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244","https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0","https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html","https://my.f5.com/manage/s/article/K000137106","https://news.ycombinator.com/item?id=37830987","https://news.ycombinator.com/item?id=37830998","https://news.ycombinator.com/item?id=37831062","https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack","https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf","https://github.com/dotnet/announcements/issues/277","https://github.com/golang/go/issues/63417","https://github.com/apache/trafficserver/pull/10564","https://github.com/facebook/proxygen/pull/466","https://github.com/h2o/h2o/pull/3291","https://github.com/microsoft/CBL-Mariner/pull/6381","https://github.com/nodejs/node/pull/50121","https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve","https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088","https://github.com/advisories/GHSA-vx74-f528-fxqg","https://github.com/micrictor/http2-rst-stream","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo","https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487","https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14","https://www.openwall.com/lists/oss-security/2023/10/10/6","https://github.com/opensearch-project/data-prepper/issues/3474","https://github.com/kubernetes/kubernetes/pull/121120","https://github.com/advisories/GHSA-xpw8-rcwv-8f8p","https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73","https://github.com/oqtane/oqtane.framework/discussions/3367","https://netty.io/news/2023/10/10/4-1-100-Final.html","https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487","https://github.com/Azure/AKS/issues/3947","https://github.com/akka/akka-http/issues/4323","https://github.com/apache/apisix/issues/10320","https://github.com/etcd-io/etcd/issues/16740","https://github.com/junkurihara/rust-rpxy/issues/97","https://github.com/kazu-yamamoto/http2/issues/93","https://github.com/ninenines/cowboy/issues/1615","https://github.com/openresty/openresty/issues/930","https://github.com/tempesta-tech/tempesta/issues/1986","https://github.com/varnishcache/varnish-cache/issues/3996","https://github.com/apache/httpd-site/pull/10","https://github.com/line/armeria/pull/5232","https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632","https://github.com/projectcontour/contour/pull/5826","https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1","https://access.redhat.com/security/cve/cve-2023-44487","https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack","https://bugzilla.redhat.com/show_bug.cgi?id=2242803","https://bugzilla.suse.com/show_bug.cgi?id=1216123","https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125","https://github.com/Kong/kong/discussions/11741","https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113","https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487","https://github.com/caddyserver/caddy/releases/tag/v2.7.5","https://go.dev/cl/534215","https://go.dev/cl/534235","https://go.dev/issue/63417","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html","https://news.ycombinator.com/item?id=37837043","https://security.paloaltonetworks.com/CVE-2023-44487","https://ubuntu.com/security/CVE-2023-44487","https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522","http://www.openwall.com/lists/oss-security/2023/10/13/4","http://www.openwall.com/lists/oss-security/2023/10/13/9","https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html","https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html","https://github.com/grpc/grpc-go/releases","https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html","https://www.debian.org/security/2023/dsa-5540","http://www.openwall.com/lists/oss-security/2023/10/18/4","http://www.openwall.com/lists/oss-security/2023/10/18/8","http://www.openwall.com/lists/oss-security/2023/10/19/6","http://www.openwall.com/lists/oss-security/2023/10/20/8","https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715","https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html","https://www.debian.org/security/2023/dsa-5549","https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html","https://security.gentoo.org/glsa/202311-09","https://www.debian.org/security/2023/dsa-5558","https://www.debian.org/security/2023/dsa-5570","https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12","https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94","https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81","https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size","https://aws.amazon.com/security/security-bulletins/AWS-2023-011","https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack","https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack","https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty","https://blog.vespa.ai/cve-2023-44487","https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps","https://istio.io/latest/news/security/istio-security-2023-004","https://linkerd.io/2023/10/12/linkerd-cve-2023-44487","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4","https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2","https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response","https://security.netapp.com/advisory/ntap-20231016-0001","https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records","https://www.eclipse.org/lists/jetty-announce/msg00181.html","https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487","https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products","https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday","https://github.com/akka/akka-http/pull/4325","https://github.com/akka/akka-http/pull/4324","https://akka.io/security/akka-http-cve-2023-44487.html","https://security.netapp.com/advisory/ntap-20240426-0007","https://security.netapp.com/advisory/ntap-20240621-0006","https://security.netapp.com/advisory/ntap-20240621-0007","https://github.com/apache/tomcat/commit/944332bb15bd2f3bf76ec2caeb1ff0a58a3bc628","https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX","https://github.com/grpc/grpc/releases/tag/v1.59.2","http://www.openwall.com/lists/oss-security/2023/10/10/6","http://www.openwall.com/lists/oss-security/2023/10/10/7","https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-784301.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","http://www.openwall.com/lists/oss-security/2025/08/13/6"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qppj-fm5r-hxr3","description":"HTTP/2 Stream Cancellation Attack","knownExploited":[{"cve":"CVE-2023-44487","cwes":["CWE-400"],"urls":["https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://nvd.nist.gov/vuln/detail/CVE-2023-44487"],"notes":"This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","dueDate":"2023-10-31","product":"HTTP/2","dateAdded":"2023-10-10","vendorProject":"IETF","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2023-44487","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-44487","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-44487","date":"2026-10-08","epss":0.99999,"percentile":0.99998}],"urls":["http://www.openwall.com/lists/oss-security/2023/10/10/6","http://www.openwall.com/lists/oss-security/2023/10/10/7","http://www.openwall.com/lists/oss-security/2023/10/13/4","http://www.openwall.com/lists/oss-security/2023/10/13/9","http://www.openwall.com/lists/oss-security/2023/10/18/4","http://www.openwall.com/lists/oss-security/2023/10/18/8","http://www.openwall.com/lists/oss-security/2023/10/19/6","http://www.openwall.com/lists/oss-security/2023/10/20/8","https://access.redhat.com/security/cve/cve-2023-44487","https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/","https://aws.amazon.com/security/security-bulletins/AWS-2023-011/","https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/","https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/","https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack","https://blog.vespa.ai/cve-2023-44487/","https://bugzilla.proxmox.com/show_bug.cgi?id=4988","https://bugzilla.redhat.com/show_bug.cgi?id=2242803","https://bugzilla.suse.com/show_bug.cgi?id=1216123","https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9","https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/","https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack","https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125","https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715","https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve","https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764","https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088","https://github.com/Azure/AKS/issues/3947","https://github.com/Kong/kong/discussions/11741","https://github.com/advisories/GHSA-qppj-fm5r-hxr3","https://github.com/advisories/GHSA-vx74-f528-fxqg","https://github.com/advisories/GHSA-xpw8-rcwv-8f8p","https://github.com/akka/akka-http/issues/4323","https://github.com/alibaba/tengine/issues/1872","https://github.com/apache/apisix/issues/10320","https://github.com/apache/httpd-site/pull/10","https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113","https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2","https://github.com/apache/trafficserver/pull/10564","https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487","https://github.com/bcdannyboy/CVE-2023-44487","https://github.com/caddyserver/caddy/issues/5877","https://github.com/caddyserver/caddy/releases/tag/v2.7.5","https://github.com/dotnet/announcements/issues/277","https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73","https://github.com/eclipse/jetty.project/issues/10679","https://github.com/envoyproxy/envoy/pull/30055","https://github.com/etcd-io/etcd/issues/16740","https://github.com/facebook/proxygen/pull/466","https://github.com/golang/go/issues/63417","https://github.com/grpc/grpc-go/pull/6703","https://github.com/grpc/grpc/releases/tag/v1.59.2","https://github.com/h2o/h2o/pull/3291","https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf","https://github.com/haproxy/haproxy/issues/2312","https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244","https://github.com/junkurihara/rust-rpxy/issues/97","https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1","https://github.com/kazu-yamamoto/http2/issues/93","https://github.com/kubernetes/kubernetes/pull/121120","https://github.com/line/armeria/pull/5232","https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632","https://github.com/micrictor/http2-rst-stream","https://github.com/microsoft/CBL-Mariner/pull/6381","https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61","https://github.com/nghttp2/nghttp2/pull/1961","https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0","https://github.com/ninenines/cowboy/issues/1615","https://github.com/nodejs/node/pull/50121","https://github.com/openresty/openresty/issues/930","https://github.com/opensearch-project/data-prepper/issues/3474","https://github.com/oqtane/oqtane.framework/discussions/3367","https://github.com/projectcontour/contour/pull/5826","https://github.com/tempesta-tech/tempesta/issues/1986","https://github.com/varnishcache/varnish-cache/issues/3996","https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo","https://istio.io/latest/news/security/istio-security-2023-004/","https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/","https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html","https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html","https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/","https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html","https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html","https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html","https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487","https://my.f5.com/manage/s/article/K000137106","https://netty.io/news/2023/10/10/4-1-100-Final.html","https://news.ycombinator.com/item?id=37830987","https://news.ycombinator.com/item?id=37830998","https://news.ycombinator.com/item?id=37831062","https://news.ycombinator.com/item?id=37837043","https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/","https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected","https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ","https://security.gentoo.org/glsa/202311-09","https://security.netapp.com/advisory/ntap-20231016-0001/","https://security.netapp.com/advisory/ntap-20240426-0007/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://security.netapp.com/advisory/ntap-20240621-0007/","https://security.paloaltonetworks.com/CVE-2023-44487","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14","https://ubuntu.com/security/CVE-2023-44487","https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/","https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522","https://www.debian.org/security/2023/dsa-5540","https://www.debian.org/security/2023/dsa-5549","https://www.debian.org/security/2023/dsa-5558","https://www.debian.org/security/2023/dsa-5570","https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487","https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/","https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/","https://www.openwall.com/lists/oss-security/2023/10/10/6","https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack","https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/","http://www.openwall.com/lists/oss-security/2025/08/13/6","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/","https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-784301.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487","https://github.com/envoyproxy/envoy/security/advisories/GHSA-jhv4-f7mr-xx76","https://github.com/kubernetes/ingress-nginx/blob/4b5c5efe2508dc915a48c54de7f23912ff2ec695/changelog/controller-1.9.3.md?plain=1#L15","https://varnish-cache.org/releases/rel6.0.12.html#rel6-0-12","https://varnish-cache.org/releases/rel7.3.1.html#rel7-3-1","https://varnish-cache.org/releases/rel7.4.2.html#rel7-4-2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-44487","description":"The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","knownExploited":[{"cve":"CVE-2023-44487","cwes":["CWE-400"],"urls":["https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/","https://nvd.nist.gov/vuln/detail/CVE-2023-44487"],"notes":"This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487","dueDate":"2023-10-31","product":"HTTP/2","dateAdded":"2023-10-10","vendorProject":"IETF","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"f2417de9d14977e6","cpes":["cpe:2.3:a:libfreetype6:libfreetype6:2.10.1-2ubuntu0.3:*:*:*:*:*:*:*"],"name":"libfreetype6","purl":"pkg:deb/ubuntu/libfreetype6@2.10.1-2ubuntu0.3?arch=amd64&distro=ubuntu-20.04&upstream=freetype","type":"deb","version":"2.10.1-2ubuntu0.3","language":"","licenses":["Apache-2.0","BSD-3-Clause","FSFUL","FSFULLR","FTL","GPL-2","GPL-2+","GPL-3","GPL-3+","MIT","MPL-1.1","OFL-1.1","OpenGroup-BSD-like","Permissive","Public-Domain","Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libfreetype6/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libfreetype6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libfreetype6:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libfreetype6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"freetype"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.10.1-2ubuntu0.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-27363","versionConstraint":"< 2.10.1-2ubuntu0.4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"freetype","version":"2.10.1-2ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-27363","fix":{"state":"fixed","versions":["2.10.1-2ubuntu0.4"],"available":[{"date":"2025-03-17","kind":"advisory","version":"2.10.1-2ubuntu0.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-27363","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-27363","date":"2026-10-08","epss":0.27775,"percentile":0.98048}],"risk":52.5,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-27363","knownExploited":[{"cve":"CVE-2025-27363","cwes":["CWE-787"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-27363"],"notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://source.android.com/docs/security/bulletin/2025-05-01","dueDate":"2025-05-27","product":"FreeType","dateAdded":"2025-05-06","vendorProject":"FreeType","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2025-27363","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-assign@fb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-27363","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-27363","date":"2026-10-08","epss":0.27775,"percentile":0.98048}],"urls":["https://www.facebook.com/security/advisories/cve-2025-27363","http://www.openwall.com/lists/oss-security/2025/03/13/1","http://www.openwall.com/lists/oss-security/2025/03/13/11","http://www.openwall.com/lists/oss-security/2025/03/13/12","http://www.openwall.com/lists/oss-security/2025/03/13/2","http://www.openwall.com/lists/oss-security/2025/03/13/3","http://www.openwall.com/lists/oss-security/2025/03/13/8","http://www.openwall.com/lists/oss-security/2025/03/14/1","http://www.openwall.com/lists/oss-security/2025/03/14/2","http://www.openwall.com/lists/oss-security/2025/03/14/3","http://www.openwall.com/lists/oss-security/2025/03/14/4","http://www.openwall.com/lists/oss-security/2025/05/06/3","http://www.openwall.com/lists/oss-security/2026/04/16/5","http://www.openwall.com/lists/oss-security/2026/04/19/3","https://lists.debian.org/debian-lts-announce/2025/03/msg00030.html","https://source.android.com/docs/security/bulletin/2025-05-01","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27363"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-27363","description":"An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.","knownExploited":[{"cve":"CVE-2025-27363","cwes":["CWE-787"],"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-27363"],"notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://source.android.com/docs/security/bulletin/2025-05-01","dueDate":"2025-05-27","product":"FreeType","dateAdded":"2025-05-06","vendorProject":"FreeType","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.109"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wmwf-9ccg-fff5","versionConstraint":">=9.0.0-M11,<9.0.109 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wmwf-9ccg-fff5","fix":{"state":"fixed","versions":["9.0.109"],"available":[{"date":"2025-10-29","kind":"first-observed","version":"9.0.109"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-55752","cwe":"CWE-23","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-55752","date":"2026-10-08","epss":0.64413,"percentile":0.99219}],"risk":48.631815,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-55752","https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog","https://github.com/apache/tomcat/commit/130d36d8492ef9e4eb22952c17c92423cb35fd06","https://github.com/apache/tomcat/commit/b5042622b8b78340ae65403c55dcb9c7416924df","https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.45","https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.11","https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.109","http://www.openwall.com/lists/oss-security/2025/10/27/4","https://www.vicarius.io/vsociety/posts/cve-2025-55752-detect-apache-tomcat-vulnerability","https://www.vicarius.io/vsociety/posts/cve-2025-55752-mitigate-apache-tomcat-vulnerability","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wmwf-9ccg-fff5","description":"Apache Tomcat Vulnerable to Relative Path Traversal"},"relatedVulnerabilities":[{"id":"CVE-2025-55752","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-55752","cwe":"CWE-23","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-55752","date":"2026-10-08","epss":0.64413,"percentile":0.99219}],"urls":["https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog","http://www.openwall.com/lists/oss-security/2025/10/27/4","https://www.vicarius.io/vsociety/posts/cve-2025-55752-detect-apache-tomcat-vulnerability","https://www.vicarius.io/vsociety/posts/cve-2025-55752-mitigate-apache-tomcat-vulnerability","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-55752","description":"Relative Path Traversal vulnerability in Apache Tomcat.\n\nThe fix for bug 60013 introduced a regression where the       rewritten URL was normalized before it was decoded. This introduced the       possibility that, for rewrite rules that rewrite query parameters to the       URL, an attacker could manipulate the request URI to bypass security       constraints including the protection for /WEB-INF/ and /META-INF/. If PUT requests were also enabled then malicious files could be uploaded leading to remote code execution. PUT requests are normally limited to trusted users and it is considered unlikely that PUT requests would be enabled in conjunction with a rewrite that manipulated the URI.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.10, from 10.1.0-M1 through 10.1.44, from 9.0.0.M11 through 9.0.108.\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.6 though 8.5.100. Other, older, EOL versions may also be affected.\nUsers are recommended to upgrade to version 11.0.11 or later, 10.1.45 or later or 9.0.109 or later, which fix the issue."}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.15"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2961","versionConstraint":"< 2.31-0ubuntu9.15 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-2961","fix":{"state":"fixed","versions":["2.31-0ubuntu9.15"],"available":[{"date":"2024-04-18","kind":"advisory","version":"2.31-0ubuntu9.15"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-08","epss":0.8833,"percentile":0.99769}],"risk":44.165,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-2961"},"relatedVulnerabilities":[{"id":"CVE-2024-2961","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.3,"impactScore":4.8,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-08","epss":0.8833,"percentile":0.99769}],"urls":["http://www.openwall.com/lists/oss-security/2024/04/17/9","http://www.openwall.com/lists/oss-security/2024/04/18/4","http://www.openwall.com/lists/oss-security/2024/04/24/2","http://www.openwall.com/lists/oss-security/2024/05/27/1","http://www.openwall.com/lists/oss-security/2024/05/27/2","http://www.openwall.com/lists/oss-security/2024/05/27/3","http://www.openwall.com/lists/oss-security/2024/05/27/4","http://www.openwall.com/lists/oss-security/2024/05/27/5","http://www.openwall.com/lists/oss-security/2024/05/27/6","http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/","https://security.netapp.com/advisory/ntap-20240531-0002/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004","https://www.ambionics.io/blog/iconv-cve-2024-2961-p1","https://www.ambionics.io/blog/iconv-cve-2024-2961-p2","https://www.ambionics.io/blog/iconv-cve-2024-2961-p3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2961","description":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.15"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2961","versionConstraint":"< 2.31-0ubuntu9.15 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-2961","fix":{"state":"fixed","versions":["2.31-0ubuntu9.15"],"available":[{"date":"2024-04-18","kind":"advisory","version":"2.31-0ubuntu9.15"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-08","epss":0.8833,"percentile":0.99769}],"risk":44.165,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-2961"},"relatedVulnerabilities":[{"id":"CVE-2024-2961","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.3,"impactScore":4.8,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-08","epss":0.8833,"percentile":0.99769}],"urls":["http://www.openwall.com/lists/oss-security/2024/04/17/9","http://www.openwall.com/lists/oss-security/2024/04/18/4","http://www.openwall.com/lists/oss-security/2024/04/24/2","http://www.openwall.com/lists/oss-security/2024/05/27/1","http://www.openwall.com/lists/oss-security/2024/05/27/2","http://www.openwall.com/lists/oss-security/2024/05/27/3","http://www.openwall.com/lists/oss-security/2024/05/27/4","http://www.openwall.com/lists/oss-security/2024/05/27/5","http://www.openwall.com/lists/oss-security/2024/05/27/6","http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/","https://security.netapp.com/advisory/ntap-20240531-0002/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004","https://www.ambionics.io/blog/iconv-cve-2024-2961-p1","https://www.ambionics.io/blog/iconv-cve-2024-2961-p2","https://www.ambionics.io/blog/iconv-cve-2024-2961-p3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2961","description":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable."}]},{"artifact":{"id":"b082b70df3e54e06","cpes":["cpe:2.3:a:locales:locales:2.31-0ubuntu9.14:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.31-0ubuntu9.14?arch=all&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.14","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.15"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2961","versionConstraint":"< 2.31-0ubuntu9.15 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.14"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-2961","fix":{"state":"fixed","versions":["2.31-0ubuntu9.15"],"available":[{"date":"2024-04-18","kind":"advisory","version":"2.31-0ubuntu9.15"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-08","epss":0.8833,"percentile":0.99769}],"risk":44.165,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-2961"},"relatedVulnerabilities":[{"id":"CVE-2024-2961","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.3,"impactScore":4.8,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-08","epss":0.8833,"percentile":0.99769}],"urls":["http://www.openwall.com/lists/oss-security/2024/04/17/9","http://www.openwall.com/lists/oss-security/2024/04/18/4","http://www.openwall.com/lists/oss-security/2024/04/24/2","http://www.openwall.com/lists/oss-security/2024/05/27/1","http://www.openwall.com/lists/oss-security/2024/05/27/2","http://www.openwall.com/lists/oss-security/2024/05/27/3","http://www.openwall.com/lists/oss-security/2024/05/27/4","http://www.openwall.com/lists/oss-security/2024/05/27/5","http://www.openwall.com/lists/oss-security/2024/05/27/6","http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/","https://security.netapp.com/advisory/ntap-20240531-0002/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004","https://www.ambionics.io/blog/iconv-cve-2024-2961-p1","https://www.ambionics.io/blog/iconv-cve-2024-2961-p2","https://www.ambionics.io/blog/iconv-cve-2024-2961-p3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2961","description":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable."}]},{"artifact":{"id":"b9071b89f9d9d9d3","cpes":["cpe:2.3:a:libnghttp2-14:libnghttp2-14:1.40.0-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2-14:libnghttp2_14:1.40.0-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2_14:libnghttp2-14:1.40.0-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2_14:libnghttp2_14:1.40.0-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2:libnghttp2-14:1.40.0-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2:libnghttp2_14:1.40.0-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libnghttp2-14","purl":"pkg:deb/ubuntu/libnghttp2-14@1.40.0-1ubuntu0.2?arch=amd64&distro=ubuntu-20.04&upstream=nghttp2","type":"deb","version":"1.40.0-1ubuntu0.2","language":"","licenses":["BSD-2-clause","Expat","GPL-3","GPL-3+","MIT","SIL-OFL-1.1","all-permissive"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libnghttp2-14/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libnghttp2-14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libnghttp2-14:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libnghttp2-14:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"nghttp2"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.40.0-1ubuntu0.3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28182","versionConstraint":"< 1.40.0-1ubuntu0.3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"nghttp2","version":"1.40.0-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-28182","fix":{"state":"fixed","versions":["1.40.0-1ubuntu0.3"],"available":[{"date":"2024-04-25","kind":"advisory","version":"1.40.0-1ubuntu0.3"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28182","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-28182","date":"2026-10-08","epss":0.8496,"percentile":0.99708}],"risk":42.480000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28182"},"relatedVulnerabilities":[{"id":"CVE-2024-28182","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28182","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-28182","date":"2026-10-08","epss":0.8496,"percentile":0.99708}],"urls":["http://www.openwall.com/lists/oss-security/2024/04/03/16","https://github.com/nghttp2/nghttp2/commit/00201ecd8f982da3b67d4f6868af72a1b03b14e0","https://github.com/nghttp2/nghttp2/commit/d71a4668c6bead55805d18810d633fbb98315af9","https://github.com/nghttp2/nghttp2/security/advisories/GHSA-x6x3-gv8h-m57q","https://lists.debian.org/debian-lts-announce/2024/04/msg00026.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGOME6ZXJG7664IPQNVE3DL67E3YP3HY/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J6ZMXUGB66VAXDW5J6QSTHM5ET25FGSA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXJO2EASHM2OQQLGVDY5ZSO7UVDVHTDK/","https://lists.debian.org/debian-lts-announce/2024/09/msg00041.html","https://www.kb.cert.org/vuls/id/421644"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28182","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync.  This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability."}]},{"artifact":{"id":"33bfbfa0d7f4ffac","cpes":["cpe:2.3:a:org.springframework:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-webmvc:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-webmvc:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_webmvc:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_webmvc:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_webmvc:5.3.22:*:*:*:*:*:*:*"],"name":"spring-webmvc","purl":"pkg:maven/org.springframework/spring-webmvc@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","manifestName":"","pomArtifactID":"spring-webmvc","archiveDigests":[{"value":"519d86b7ac9b8b6bb54739eb4eb73dc13a263b28","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-g5vr-rgqm-vf78","versionConstraint":"<=5.3.40 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-webmvc","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-g5vr-rgqm-vf78","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38819","cwe":"CWE-22","type":"Secondary","source":"security@vmware.com"}],"epss":[{"cve":"CVE-2024-38819","date":"2026-10-08","epss":0.5604,"percentile":0.99027}],"risk":42.03,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-38819","https://spring.io/security/cve-2024-38819","https://github.com/spring-projects/spring-framework/issues/33689","https://github.com/spring-projects/spring-framework/commit/3bfbe30a7814c9ea1556d40df9bd87ddb3ba372d","https://github.com/spring-projects/spring-framework/commit/fb7890d73975a3d9e0763e0926df2bd0a608e87e","https://security.netapp.com/advisory/ntap-20250110-0010"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-g5vr-rgqm-vf78","description":"Spring Framework Path Traversal vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-38819","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38819","cwe":"CWE-22","type":"Secondary","source":"security@vmware.com"}],"epss":[{"cve":"CVE-2024-38819","date":"2026-10-08","epss":0.5604,"percentile":0.99027}],"urls":["https://spring.io/security/cve-2024-38819","https://security.netapp.com/advisory/ntap-20250110-0010/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-38819","description":"Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.71"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-hfrx-6qgj-fp6c","versionConstraint":">=9.0.0-M1,<9.0.71 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-hfrx-6qgj-fp6c","fix":{"state":"fixed","versions":["9.0.71"],"available":[{"date":"2024-04-19","kind":"first-observed","version":"9.0.71"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24998","cwe":"CWE-770","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2023-24998","date":"2026-10-08","epss":0.48788,"percentile":0.98848}],"risk":36.590999999999994,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-24998","https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy","https://github.com/apache/commons-fileupload/commit/e20c04990f7420ca917e96a84cec58b13a1b3d17","https://commons.apache.org/proper/commons-fileupload/security-reports.html","http://www.openwall.com/lists/oss-security/2023/05/22/1","https://security.gentoo.org/glsa/202305-37","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://www.debian.org/security/2023/dsa-5522","https://github.com/apache/tomcat/commit/8a2285f13affa961cc65595aad999db5efae45ce","https://github.com/apache/tomcat/commit/9ca96c8c1eba86c0aaa2e6be581ba2a7d4d4ae6e","https://github.com/apache/tomcat/commit/cf77cc545de0488fb89e24294151504a7432df74","https://github.com/apache/tomcat/commit/d53d8e7f77042cc32a3b98f589496a1ef5088e38","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-8.html","https://tomcat.apache.org/security-9.html","https://github.com/search?q=repo%3Aapache%2Ftomcat+util.http+path%3A%2F%5Eres%5C%2Fbnd%5C%2F%2F&type=code","https://security.netapp.com/advisory/ntap-20230302-0013","https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html","https://security.netapp.com/advisory/ntap-20241108-0002"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-hfrx-6qgj-fp6c","description":"Apache Commons FileUpload denial of service vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2023-24998","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24998","cwe":"CWE-770","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2023-24998","date":"2026-10-08","epss":0.48788,"percentile":0.98848}],"urls":["http://www.openwall.com/lists/oss-security/2023/05/22/1","https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://security.gentoo.org/glsa/202305-37","https://www.debian.org/security/2023/dsa-5522","https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html","https://security.netapp.com/advisory/ntap-20230302-0013/","https://security.netapp.com/advisory/ntap-20241108-0002/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-24998","description":"Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads.\n\n\n\n\nNote that, like all of the file upload limits, the\n          new configuration option (FileUploadBase#setFileCountMax) is not\n          enabled by default and must be explicitly configured."}]},{"artifact":{"id":"55fa295b7d86df9a","cpes":["cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.31.1-4ubuntu0.5:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-0:libsqlite3_0:3.31.1-4ubuntu0.5:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3-0:3.31.1-4ubuntu0.5:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3_0:3.31.1-4ubuntu0.5:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-0:3.31.1-4ubuntu0.5:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_0:3.31.1-4ubuntu0.5:*:*:*:*:*:*:*"],"name":"libsqlite3-0","purl":"pkg:deb/ubuntu/libsqlite3-0@3.31.1-4ubuntu0.5?arch=amd64&distro=ubuntu-20.04&upstream=sqlite3","type":"deb","version":"3.31.1-4ubuntu0.5","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-0/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libsqlite3-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-6965","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"sqlite3","version":"3.31.1-4ubuntu0.5"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-6965","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-6965","cwe":"CWE-197","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2025-6965","date":"2026-10-08","epss":0.71394,"percentile":0.99401}],"risk":35.697,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-6965"},"relatedVulnerabilities":[{"id":"CVE-2025-6965","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L","metrics":{"baseScore":7.7,"impactScore":5.3,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-6965","cwe":"CWE-197","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2025-6965","date":"2026-10-08","epss":0.71394,"percentile":0.99401}],"urls":["https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8","http://seclists.org/fulldisclosure/2025/Sep/49","http://seclists.org/fulldisclosure/2025/Sep/53","http://seclists.org/fulldisclosure/2025/Sep/56","http://seclists.org/fulldisclosure/2025/Sep/57","http://seclists.org/fulldisclosure/2025/Sep/58","http://www.openwall.com/lists/oss-security/2025/09/06/1","https://cert-portal.siemens.com/productcert/html/ssa-225816.html","https://cert-portal.siemens.com/productcert/html/ssa-485750.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-6965","description":"There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above."}]},{"artifact":{"id":"f6d59748713e2bd6","cpes":["cpe:2.3:a:libcups2:libcups2:2.3.1-9ubuntu1.6:*:*:*:*:*:*:*"],"name":"libcups2","purl":"pkg:deb/ubuntu/libcups2@2.3.1-9ubuntu1.6?arch=amd64&distro=ubuntu-20.04&upstream=cups","type":"deb","version":"2.3.1-9ubuntu1.6","language":"","licenses":["Apache-2.0","Apache-2.0-with-GPL2-LGPL2-Exception","BSD-3-clause","FSFUL","Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcups2/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libcups2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcups2:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libcups2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cups"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.3.1-9ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-47175","versionConstraint":"< 2.3.1-9ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"cups","version":"2.3.1-9ubuntu1.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-47175","fix":{"state":"fixed","versions":["2.3.1-9ubuntu1.9"],"available":[{"date":"2024-09-26","kind":"advisory","version":"2.3.1-9ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-47175","cwe":"CWE-20","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-47175","date":"2026-10-08","epss":0.63607,"percentile":0.99198}],"risk":31.8035,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-47175"},"relatedVulnerabilities":[{"id":"CVE-2024-47175","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":8.6,"impactScore":4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47175","cwe":"CWE-20","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-47175","date":"2026-10-08","epss":0.63607,"percentile":0.99198}],"urls":["https://github.com/OpenPrinting/cups-browsed/security/advisories/GHSA-rj88-6mr5-rcw8","https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-p9rh-jxmq-gq47","https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-w63j-6g73-wmg5","https://github.com/OpenPrinting/libppd/security/advisories/GHSA-7xfx-47qg-grp6","https://www.cups.org","https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I","http://www.openwall.com/lists/oss-security/2024/09/27/3","https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477","https://lists.debian.org/debian-lts-announce/2024/09/msg00047.html","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0016","https://security.netapp.com/advisory/ntap-20241011-0001/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-47175","description":"CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176."}]},{"artifact":{"id":"115f8756a931640f","cpes":["cpe:2.3:a:org.springframework:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_web:5.3.22:*:*:*:*:*:*:*"],"name":"spring-web","purl":"pkg:maven/org.springframework/spring-web@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","manifestName":"","pomArtifactID":"spring-web","archiveDigests":[{"value":"fdab9b8d8df2e6a8fb90f2481c361bcf2c129567","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"6.0.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4wrc-f8pq-fpqp","versionConstraint":"<6.0.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-web","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-4wrc-f8pq-fpqp","fix":{"state":"fixed","versions":["6.0.0"],"available":[{"date":"2022-12-10","kind":"first-observed","version":"6.0.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-1000027","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-1000027","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-1000027","date":"2026-10-08","epss":0.33179,"percentile":0.98331}],"risk":31.18826,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2016-1000027","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000027","https://security-tracker.debian.org/tracker/CVE-2016-1000027","https://www.tenable.com/security/research/tra-2016-20","https://github.com/spring-projects/spring-framework/issues/24434","https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-1231625331","https://github.com/spring-projects/spring-framework/commit/5cbe90b2cd91b866a5a9586e460f311860e11cfa","https://support.contrastsecurity.com/hc/en-us/articles/4402400830612-Spring-web-Java-Deserialization-CVE-2016-1000027","https://github.com/spring-projects/spring-framework/issues/21680","https://github.com/spring-projects/spring-framework/commit/2b051b8b321768a4cfef83077db65c6328ffd60f","https://jira.spring.io/browse/SPR-17143?redirect=false","https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-579669626","https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-582313417","https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-744519525","https://security.netapp.com/advisory/ntap-20230420-0009/","https://spring.io/blog/2022/05/11/spring-framework-5-3-20-and-5-2-22-available-now"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4wrc-f8pq-fpqp","description":"Pivotal Spring Framework contains unsafe Java deserialization methods"},"relatedVulnerabilities":[{"id":"CVE-2016-1000027","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-1000027","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-1000027","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-1000027","date":"2026-10-08","epss":0.33179,"percentile":0.98331}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000027","https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-579669626","https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-582313417","https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-744519525","https://raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2016/1000xxx/CVE-2016-1000027.json","https://security-tracker.debian.org/tracker/CVE-2016-1000027","https://security.netapp.com/advisory/ntap-20230420-0009/","https://spring.io/blog/2022/05/11/spring-framework-5-3-20-and-5-2-22-available-now","https://www.tenable.com/security/research/tra-2016-20"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000027","description":"Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required. NOTE: the vendor's position is that untrusted data is not an intended use case. The product's behavior will not be changed because some users rely on deserialization of trusted data."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.98"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5j33-cvvr-w245","versionConstraint":">=9.0.0.M1,<9.0.98 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-5j33-cvvr-w245","fix":{"state":"fixed","versions":["9.0.98"],"available":[{"date":"2024-12-27","kind":"first-observed","version":"9.0.98"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-50379","cwe":"CWE-367","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-50379","date":"2026-10-08","epss":0.31824,"percentile":0.98263}],"risk":25.459200000000003,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-50379","https://lists.apache.org/thread/y6lj6q1xnp822g6ro70tn19sgtjmr80r","https://github.com/apache/tomcat/commit/05ddeeaa54df1e2dc427d0164bedd6b79f78d81f","https://github.com/apache/tomcat/commit/43b507ebac9d268b1ea3d908e296cc6e46795c00","https://github.com/apache/tomcat/commit/631500b0c9b2a2a2abb707e3de2e10a5936e5d41","https://github.com/apache/tomcat/commit/684247ae85fa633b9197b32391de59fc54703842","https://github.com/apache/tomcat/commit/8554f6b1722b33a2ce8b0a3fad37825f3a75f2d2","https://github.com/apache/tomcat/commit/cc7a98b57c6dc1df21979fcff94a36e068f4456c","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.34","https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.2","https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.98","http://www.openwall.com/lists/oss-security/2024/12/17/4","http://www.openwall.com/lists/oss-security/2024/12/18/2","https://security.netapp.com/advisory/ntap-20250103-0003","https://lists.debian.org/debian-lts-announce/2025/01/msg00009.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5j33-cvvr-w245","description":"Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-50379","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-50379","cwe":"CWE-367","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-50379","date":"2026-10-08","epss":0.31824,"percentile":0.98263}],"urls":["https://lists.apache.org/thread/y6lj6q1xnp822g6ro70tn19sgtjmr80r","http://www.openwall.com/lists/oss-security/2024/12/17/4","http://www.openwall.com/lists/oss-security/2024/12/18/2","https://lists.debian.org/debian-lts-announce/2025/01/msg00009.html","https://security.netapp.com/advisory/ntap-20250103-0003/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-50379","description":"Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configuration).\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97.\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.\n\nUsers are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.106"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h3gc-qfqq-6h8f","versionConstraint":">=9.0.0.M1,<=9.0.105 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-h3gc-qfqq-6h8f","fix":{"state":"fixed","versions":["9.0.106"],"available":[{"date":"2025-06-17","kind":"first-observed","version":"9.0.106"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48988","cwe":"CWE-770","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48988","date":"2026-10-08","epss":0.30515,"percentile":0.982}],"risk":23.801699999999997,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-48988","https://lists.apache.org/thread/nzkqsok8t42qofgqfmck536mtyzygp18","https://github.com/apache/tomcat/commit/2b0ab14fb55d4edc896e5f1817f2ab76f714ae5e","https://github.com/apache/tomcat/commit/cdde8e655bc1c5c60a07efd216251d77c52fd7f6","https://github.com/apache/tomcat/commit/ee8042ffce4cb9324dfd79efda5984f37bbb6910","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html","http://www.openwall.com/lists/oss-security/2025/06/16/1","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h3gc-qfqq-6h8f","description":"Apache Tomcat - DoS in multipart upload"},"relatedVulnerabilities":[{"id":"CVE-2025-48988","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48988","cwe":"CWE-770","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48988","date":"2026-10-08","epss":0.30515,"percentile":0.982}],"urls":["https://lists.apache.org/thread/nzkqsok8t42qofgqfmck536mtyzygp18","http://www.openwall.com/lists/oss-security/2025/06/16/1","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48988","description":"Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105.\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions \nmay also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue."}]},{"artifact":{"id":"16b8b8f03be333e3","cpes":["cpe:2.3:a:apache:commons-beanutils:1.9.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_beanutils:1.9.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:beanutils:1.9.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:1.9.2:*:*:*:*:*:*:*"],"name":"commons-beanutils","purl":"pkg:maven/commons-beanutils/commons-beanutils@1.9.2","type":"java-archive","version":"1.9.2","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"commons-beanutils","virtualPath":"/usr/lib/unifi/lib/commons-beanutils-1.9.2.jar","manifestName":"","pomArtifactID":"commons-beanutils","archiveDigests":[{"value":"7a87d845ad3a155297e8f67d9008f4c1e5656b71","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/commons-beanutils-1.9.2.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/commons-beanutils-1.9.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.9.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-6phf-73q6-gh87","versionConstraint":"<1.9.4 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"commons-beanutils:commons-beanutils","version":"1.9.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-6phf-73q6-gh87","fix":{"state":"fixed","versions":["1.9.4"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"1.9.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-10086","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-10086","date":"2026-10-08","epss":0.28384,"percentile":0.98083}],"risk":21.00416,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2019-10086","https://access.redhat.com/errata/RHSA-2019:4317","https://access.redhat.com/errata/RHSA-2020:0057","https://access.redhat.com/errata/RHSA-2020:0194","https://access.redhat.com/errata/RHSA-2020:0804","https://access.redhat.com/errata/RHSA-2020:0805","https://access.redhat.com/errata/RHSA-2020:0806","https://access.redhat.com/errata/RHSA-2020:0811","https://lists.apache.org/thread.html/02094ad226dbc17a2368beaf27e61d8b1432f5baf77d0ca995bb78bc@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/1f78f1e32cc5614ec0c5b822ba4bd7fc8e8b5c46c8e038b6bd609cb5@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/2fd61dc89df9aeab738d2b49f48d42c76f7d53b980ba04e1d48bce48@%3Cdev.shiro.apache.org%3E","https://lists.apache.org/thread.html/3d1ed1a1596c08c4d5fea97b36c651ce167b773f1afc75251ce7a125@%3Ccommits.tinkerpop.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/5261066cd7adee081ee05c8bf0e96cf0b2eeaced391e19117ae4daa6@%3Cdev.shiro.apache.org%3E","https://lists.apache.org/thread.html/956995acee0d8bc046f1df0a55b7fbeb65dd2f82864e5de1078bacb0@%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/a684107d3a78e431cf0fbb90629e8559a36ff8fe94c3a76e620b39fa@%3Cdev.shiro.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/c94bc9649d5109a663b2129371dc45753fbdeacd340105548bbe93c3@%3Cdev.shiro.apache.org%3E","https://lists.apache.org/thread.html/d6ca9439c53374b597f33b7ec180001625597db48ea30356af01145f@%3Cdev.shiro.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/r967953a14e05016bc4bcae9ef3dd92e770181158b4246976ed8295c9@%3Cdev.brooklyn.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/08/msg00030.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4APPGLBWMFAS4WHNLR4LIJ65DJGPV7TF/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIUYSL2RSIWZVNSUIXJTIFPIPIF6OAIO/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00007.html","http://mail-archives.apache.org/mod_mbox/www-announce/201908.mbox/%3cC628798F-315D-4428-8CB1-4ED1ECC958E4@apache.org%3e","https://www.oracle.com/security-alerts/cpujul2020.html","https://lists.apache.org/thread.html/r18d8b4f9263e5cad3bbaef0cdba0e2ccdf9201316ac4b85e23eb7ee4@%3Cdev.atlas.apache.org%3E","https://lists.apache.org/thread.html/r306c0322aa5c0da731e03f3ce9f07f4745c052c6b73f4e78faf232ca@%3Cdev.atlas.apache.org%3E","https://lists.apache.org/thread.html/r43de02fd4a4f52c4bdeff8c02f09625d83cd047498009c1cdab857db@%3Cdev.rocketmq.apache.org%3E","https://lists.apache.org/thread.html/r6194ced4828deb32023cd314e31f41c61d388b58935d102c7de91f58@%3Cdev.atlas.apache.org%3E","https://lists.apache.org/thread.html/ra87ac17410a62e813cba901fdd4e9a674dd53daaf714870f28e905f1@%3Cdev.atlas.apache.org%3E","https://lists.apache.org/thread.html/racd3e7b2149fa2f255f016bd6bffab0fea77b6fb81c50db9a17f78e6@%3Cdev.atlas.apache.org%3E","https://lists.apache.org/thread.html/rae81e0c8ebdf47ffaa85a01240836bfece8a990c48f55c7933162b5c@%3Cdev.atlas.apache.org%3E","https://lists.apache.org/thread.html/rb8dac04cb7e9cc5dedee8dabaa1c92614f590642e5ebf02a145915ba@%3Ccommits.atlas.apache.org%3E","https://lists.apache.org/thread.html/reee57101464cf7622d640ae013b2162eb864f603ec4093de8240bb8f@%3Cdev.atlas.apache.org%3E","https://www.oracle.com/security-alerts/cpujan2021.html","https://lists.apache.org/thread.html/r513a7a21c422170318115463b399dd58ab447fe0990b13e5884f0825@%3Ccommits.dolphinscheduler.apache.org%3E","https://lists.apache.org/thread.html/ra9a139fdc0999750dcd519e81384bc1fe3946f311b1796221205f51c@%3Ccommits.dolphinscheduler.apache.org%3E","https://www.oracle.com/security-alerts/cpuApr2021.html","https://lists.apache.org/thread.html/r46e536fc98942dce99fadd2e313aeefe90c1a769c5cd85d98df9d098@%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/rcc029be4edaaf5b8bb85818aab494e16f312fced07a0f4a202771ba2@%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/rec74f3a94dd850259c730b4ba6f7b6211222b58900ec088754aa0534@%3Cissues.nifi.apache.org%3E","https://www.oracle.com//security-alerts/cpujul2021.html","https://lists.apache.org/thread.html/r2d5f1d88c39bd615271abda63964a0bee9b2b57fef1f84cb4c43032e@%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/ra41fd0ad4b7e1d675c03a5081a16a6603085a4e37d30b866067566fe@%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/rd2d2493f4f1af6980d265b8d84c857e2b7ab80a46e1423710c448957@%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/re2028d4d76ba1db3e3c3a722d6c6034e801cc3b309f69cc166eaa32b@%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/re3cd7cb641d7fc6684e4fc3c336a8bad4a01434bb5625a06e3600fd1@%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/rb1f76c2c0a4d6efb8a3523974f9d085d5838b73e7bffdf9a8f212997@%3Cissues.nifi.apache.org%3E","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-6phf-73q6-gh87","description":"Insecure Deserialization in Apache Commons Beanutils"},"relatedVulnerabilities":[{"id":"CVE-2019-10086","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-10086","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-10086","date":"2026-10-08","epss":0.28384,"percentile":0.98083}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00007.html","http://mail-archives.apache.org/mod_mbox/www-announce/201908.mbox/%3cC628798F-315D-4428-8CB1-4ED1ECC958E4%40apache.org%3e","https://access.redhat.com/errata/RHSA-2019:4317","https://access.redhat.com/errata/RHSA-2020:0057","https://access.redhat.com/errata/RHSA-2020:0194","https://access.redhat.com/errata/RHSA-2020:0804","https://access.redhat.com/errata/RHSA-2020:0805","https://access.redhat.com/errata/RHSA-2020:0806","https://access.redhat.com/errata/RHSA-2020:0811","https://lists.apache.org/thread.html/02094ad226dbc17a2368beaf27e61d8b1432f5baf77d0ca995bb78bc%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/1f78f1e32cc5614ec0c5b822ba4bd7fc8e8b5c46c8e038b6bd609cb5%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/2fd61dc89df9aeab738d2b49f48d42c76f7d53b980ba04e1d48bce48%40%3Cdev.shiro.apache.org%3E","https://lists.apache.org/thread.html/3d1ed1a1596c08c4d5fea97b36c651ce167b773f1afc75251ce7a125%40%3Ccommits.tinkerpop.apache.org%3E","https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/5261066cd7adee081ee05c8bf0e96cf0b2eeaced391e19117ae4daa6%40%3Cdev.shiro.apache.org%3E","https://lists.apache.org/thread.html/956995acee0d8bc046f1df0a55b7fbeb65dd2f82864e5de1078bacb0%40%3Cissues.commons.apache.org%3E","https://lists.apache.org/thread.html/a684107d3a78e431cf0fbb90629e8559a36ff8fe94c3a76e620b39fa%40%3Cdev.shiro.apache.org%3E","https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/c94bc9649d5109a663b2129371dc45753fbdeacd340105548bbe93c3%40%3Cdev.shiro.apache.org%3E","https://lists.apache.org/thread.html/d6ca9439c53374b597f33b7ec180001625597db48ea30356af01145f%40%3Cdev.shiro.apache.org%3E","https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E","https://lists.apache.org/thread.html/r18d8b4f9263e5cad3bbaef0cdba0e2ccdf9201316ac4b85e23eb7ee4%40%3Cdev.atlas.apache.org%3E","https://lists.apache.org/thread.html/r2d5f1d88c39bd615271abda63964a0bee9b2b57fef1f84cb4c43032e%40%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/r306c0322aa5c0da731e03f3ce9f07f4745c052c6b73f4e78faf232ca%40%3Cdev.atlas.apache.org%3E","https://lists.apache.org/thread.html/r43de02fd4a4f52c4bdeff8c02f09625d83cd047498009c1cdab857db%40%3Cdev.rocketmq.apache.org%3E","https://lists.apache.org/thread.html/r46e536fc98942dce99fadd2e313aeefe90c1a769c5cd85d98df9d098%40%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/r513a7a21c422170318115463b399dd58ab447fe0990b13e5884f0825%40%3Ccommits.dolphinscheduler.apache.org%3E","https://lists.apache.org/thread.html/r6194ced4828deb32023cd314e31f41c61d388b58935d102c7de91f58%40%3Cdev.atlas.apache.org%3E","https://lists.apache.org/thread.html/r967953a14e05016bc4bcae9ef3dd92e770181158b4246976ed8295c9%40%3Cdev.brooklyn.apache.org%3E","https://lists.apache.org/thread.html/ra41fd0ad4b7e1d675c03a5081a16a6603085a4e37d30b866067566fe%40%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/ra87ac17410a62e813cba901fdd4e9a674dd53daaf714870f28e905f1%40%3Cdev.atlas.apache.org%3E","https://lists.apache.org/thread.html/ra9a139fdc0999750dcd519e81384bc1fe3946f311b1796221205f51c%40%3Ccommits.dolphinscheduler.apache.org%3E","https://lists.apache.org/thread.html/racd3e7b2149fa2f255f016bd6bffab0fea77b6fb81c50db9a17f78e6%40%3Cdev.atlas.apache.org%3E","https://lists.apache.org/thread.html/rae81e0c8ebdf47ffaa85a01240836bfece8a990c48f55c7933162b5c%40%3Cdev.atlas.apache.org%3E","https://lists.apache.org/thread.html/rb1f76c2c0a4d6efb8a3523974f9d085d5838b73e7bffdf9a8f212997%40%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/rb8dac04cb7e9cc5dedee8dabaa1c92614f590642e5ebf02a145915ba%40%3Ccommits.atlas.apache.org%3E","https://lists.apache.org/thread.html/rcc029be4edaaf5b8bb85818aab494e16f312fced07a0f4a202771ba2%40%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/rd2d2493f4f1af6980d265b8d84c857e2b7ab80a46e1423710c448957%40%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/re2028d4d76ba1db3e3c3a722d6c6034e801cc3b309f69cc166eaa32b%40%3Ccommits.nifi.apache.org%3E","https://lists.apache.org/thread.html/re3cd7cb641d7fc6684e4fc3c336a8bad4a01434bb5625a06e3600fd1%40%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/rec74f3a94dd850259c730b4ba6f7b6211222b58900ec088754aa0534%40%3Cissues.nifi.apache.org%3E","https://lists.apache.org/thread.html/reee57101464cf7622d640ae013b2162eb864f603ec4093de8240bb8f%40%3Cdev.atlas.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/08/msg00030.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4APPGLBWMFAS4WHNLR4LIJ65DJGPV7TF/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIUYSL2RSIWZVNSUIXJTIFPIPIF6OAIO/","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-10086","description":"In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean."}]},{"artifact":{"id":"02a2cda4e2596879","cpes":["cpe:2.3:a:curl:curl:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.68.0-1ubuntu2.22"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-2398","versionConstraint":"< 7.68.0-1ubuntu2.22 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-2398","fix":{"state":"fixed","versions":["7.68.0-1ubuntu2.22"],"available":[{"date":"2024-03-27","kind":"advisory","version":"7.68.0-1ubuntu2.22"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-2398","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-2398","date":"2026-10-08","epss":0.36081,"percentile":0.98442}],"risk":18.0405,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-2398"},"relatedVulnerabilities":[{"id":"CVE-2024-2398","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2398","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-2398","date":"2026-10-08","epss":0.36081,"percentile":0.98442}],"urls":["http://seclists.org/fulldisclosure/2024/Jul/18","http://seclists.org/fulldisclosure/2024/Jul/19","http://seclists.org/fulldisclosure/2024/Jul/20","http://www.openwall.com/lists/oss-security/2024/03/27/3","https://curl.se/docs/CVE-2024-2398.html","https://curl.se/docs/CVE-2024-2398.json","https://hackerone.com/reports/2402845","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/","https://security.netapp.com/advisory/ntap-20240503-0009/","https://support.apple.com/kb/HT214118","https://support.apple.com/kb/HT214119","https://support.apple.com/kb/HT214120"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2398","description":"When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application."}]},{"artifact":{"id":"5bfe812075df9ecc","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04&upstream=curl","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.68.0-1ubuntu2.22"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2398","versionConstraint":"< 7.68.0-1ubuntu2.22 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-2398","fix":{"state":"fixed","versions":["7.68.0-1ubuntu2.22"],"available":[{"date":"2024-03-27","kind":"advisory","version":"7.68.0-1ubuntu2.22"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-2398","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-2398","date":"2026-10-08","epss":0.36081,"percentile":0.98442}],"risk":18.0405,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-2398"},"relatedVulnerabilities":[{"id":"CVE-2024-2398","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2398","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-2398","date":"2026-10-08","epss":0.36081,"percentile":0.98442}],"urls":["http://seclists.org/fulldisclosure/2024/Jul/18","http://seclists.org/fulldisclosure/2024/Jul/19","http://seclists.org/fulldisclosure/2024/Jul/20","http://www.openwall.com/lists/oss-security/2024/03/27/3","https://curl.se/docs/CVE-2024-2398.html","https://curl.se/docs/CVE-2024-2398.json","https://hackerone.com/reports/2402845","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/","https://security.netapp.com/advisory/ntap-20240503-0009/","https://support.apple.com/kb/HT214118","https://support.apple.com/kb/HT214119","https://support.apple.com/kb/HT214120"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2398","description":"When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1f-1ubuntu2.23"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2511","versionConstraint":"< 1.1.1f-1ubuntu2.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-2511","fix":{"state":"fixed","versions":["1.1.1f-1ubuntu2.23"],"available":[{"date":"2024-07-31","kind":"advisory","version":"1.1.1f-1ubuntu2.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-2511","cwe":"CWE-1325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-2511","date":"2026-10-08","epss":0.52421,"percentile":0.98938}],"risk":15.726299999999998,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-2511"},"relatedVulnerabilities":[{"id":"CVE-2024-2511","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2511","cwe":"CWE-1325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-2511","date":"2026-10-08","epss":0.52421,"percentile":0.98938}],"urls":["https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce","https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d","https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08","https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640","https://www.openssl.org/news/secadv/20240408.txt","http://www.openwall.com/lists/oss-security/2024/04/08/5","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240503-0013/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-354112.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2511","description":"Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1f-1ubuntu2.23"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-2511","versionConstraint":"< 1.1.1f-1ubuntu2.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-2511","fix":{"state":"fixed","versions":["1.1.1f-1ubuntu2.23"],"available":[{"date":"2024-07-31","kind":"advisory","version":"1.1.1f-1ubuntu2.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-2511","cwe":"CWE-1325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-2511","date":"2026-10-08","epss":0.52421,"percentile":0.98938}],"risk":15.726299999999998,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-2511"},"relatedVulnerabilities":[{"id":"CVE-2024-2511","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2511","cwe":"CWE-1325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-2511","date":"2026-10-08","epss":0.52421,"percentile":0.98938}],"urls":["https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce","https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d","https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08","https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640","https://www.openssl.org/news/secadv/20240408.txt","http://www.openwall.com/lists/oss-security/2024/04/08/5","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240503-0013/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-354112.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2511","description":"Issue summary: Some non-default TLS server configurations can cause unbounded\nmemory growth when processing TLSv1.3 sessions\n\nImpact summary: An attacker may exploit certain server configurations to trigger\nunbounded memory growth that would lead to a Denial of Service\n\nThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is\nbeing used (but not if early_data support is also configured and the default\nanti-replay protection is in use). In this case, under certain conditions, the\nsession cache can get into an incorrect state and it will fail to flush properly\nas it fills. The session cache will continue to grow in an unbounded manner. A\nmalicious client could deliberately create the scenario for this failure to\nforce a Denial of Service. It may also happen by accident in normal operation.\n\nThis issue only affects TLS servers supporting TLSv1.3. It does not affect TLS\nclients.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL\n1.0.2 is also not affected by this issue."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.86"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7w75-32cg-r6g2","versionConstraint":">=9.0.0-M1,<=9.0.85 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-7w75-32cg-r6g2","fix":{"state":"fixed","versions":["9.0.86"],"available":[{"date":"2024-03-16","kind":"first-observed","version":"9.0.86"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U","metrics":{"baseScore":6.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-24549","cwe":"CWE-20","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-24549","date":"2026-10-08","epss":0.23072,"percentile":0.97711}],"risk":13.90088,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-24549","https://lists.apache.org/thread/4c50rmomhbbsdgfjsgwlb51xdwfjdcvg","https://github.com/apache/tomcat/commit/0cac540a882220231ba7a82330483cbd5f6b1f96","https://github.com/apache/tomcat/commit/810f49d5ff6d64b704af85d5b8d0aab9ec3c83f5","https://github.com/apache/tomcat/commit/8e03be9f2698f2da9027d40b9e9c0c9429b74dc0","https://github.com/apache/tomcat/commit/d07c82194edb69d99b438828fe2cbfadbb207843","https://security.netapp.com/advisory/ntap-20240402-0002","https://lists.debian.org/debian-lts-announce/2024/04/msg00001.html","http://www.openwall.com/lists/oss-security/2024/03/13/3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/736G4GPZWS2DSQO5WKXO3G6OMZKFEK55","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UWIS5MMGYDZBLJYT674ZI5AWFHDZ46B"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7w75-32cg-r6g2","description":"Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests"},"relatedVulnerabilities":[{"id":"CVE-2024-24549","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-24549","cwe":"CWE-20","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-24549","date":"2026-10-08","epss":0.23072,"percentile":0.97711}],"urls":["https://lists.apache.org/thread/4c50rmomhbbsdgfjsgwlb51xdwfjdcvg","http://www.openwall.com/lists/oss-security/2024/03/13/3","https://lists.debian.org/debian-lts-announce/2024/04/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UWIS5MMGYDZBLJYT674ZI5AWFHDZ46B/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/736G4GPZWS2DSQO5WKXO3G6OMZKFEK55/","https://security.netapp.com/advisory/ntap-20240402-0002/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-24549","description":"Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after all of the headers had been processed.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from 9.0.0-M1 through 9.0.85, from 8.5.0 through 8.5.98. Other, older, EOL versions may also be affected.\n\nUsers are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue."}]},{"artifact":{"id":"33bfbfa0d7f4ffac","cpes":["cpe:2.3:a:org.springframework:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-webmvc:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-webmvc:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_webmvc:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_webmvc:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_webmvc:5.3.22:*:*:*:*:*:*:*"],"name":"spring-webmvc","purl":"pkg:maven/org.springframework/spring-webmvc@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","manifestName":"","pomArtifactID":"spring-webmvc","archiveDigests":[{"value":"519d86b7ac9b8b6bb54739eb4eb73dc13a263b28","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cx7f-g6mp-7hqm","versionConstraint":">=5.3.0,<=5.3.39 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-webmvc","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-cx7f-g6mp-7hqm","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38816","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38816","date":"2026-10-08","epss":0.14718,"percentile":0.96597}],"risk":11.0385,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-38816","https://spring.io/security/cve-2024-38816","https://github.com/spring-projects/spring-framework/commit/d86bf8b2056429edf5494456cffcb2b243331c49","https://security.netapp.com/advisory/ntap-20241227-0001"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cx7f-g6mp-7hqm","description":"Path traversal vulnerability in functional web frameworks"},"relatedVulnerabilities":[{"id":"CVE-2024-38816","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38816","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38816","date":"2026-10-08","epss":0.14718,"percentile":0.96597}],"urls":["https://spring.io/security/cve-2024-38816","https://security.netapp.com/advisory/ntap-20241227-0001/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-38816","description":"Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.\n\nSpecifically, an application is vulnerable when both of the following are true:\n\n  *  the web application uses RouterFunctions to serve static resources\n  *  resource handling is explicitly configured with a FileSystemResource location\n\n\nHowever, malicious requests are blocked and rejected when any of the following is true:\n\n  *  the  Spring Security HTTP Firewall https://docs.spring.io/spring-security/reference/servlet/exploits/firewall.html  is in use\n  *  the application runs on Tomcat or Jetty"}]},{"artifact":{"id":"02a2cda4e2596879","cpes":["cpe:2.3:a:curl:curl:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.68.0-1ubuntu2.23"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-7264","versionConstraint":"< 7.68.0-1ubuntu2.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-7264","fix":{"state":"fixed","versions":["7.68.0-1ubuntu2.23"],"available":[{"date":"2024-08-05","kind":"advisory","version":"7.68.0-1ubuntu2.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-08","epss":0.17301,"percentile":0.9704}],"risk":8.6505,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-7264"},"relatedVulnerabilities":[{"id":"CVE-2024-7264","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-08","epss":0.17301,"percentile":0.9704}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/31/1","https://curl.se/docs/CVE-2024-7264.html","https://curl.se/docs/CVE-2024-7264.json","https://hackerone.com/reports/2629968","https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519","https://security.netapp.com/advisory/ntap-20240828-0008/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used."}]},{"artifact":{"id":"5bfe812075df9ecc","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04&upstream=curl","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.68.0-1ubuntu2.23"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-7264","versionConstraint":"< 7.68.0-1ubuntu2.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-7264","fix":{"state":"fixed","versions":["7.68.0-1ubuntu2.23"],"available":[{"date":"2024-08-05","kind":"advisory","version":"7.68.0-1ubuntu2.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-08","epss":0.17301,"percentile":0.9704}],"risk":8.6505,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-7264"},"relatedVulnerabilities":[{"id":"CVE-2024-7264","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-08","epss":0.17301,"percentile":0.9704}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/31/1","https://curl.se/docs/CVE-2024-7264.html","https://curl.se/docs/CVE-2024-7264.json","https://hackerone.com/reports/2629968","https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519","https://security.netapp.com/advisory/ntap-20240828-0008/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used."}]},{"artifact":{"id":"c1afe861706c7168","cpes":["cpe:2.3:a:krb5-locales:krb5-locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5-locales:krb5_locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5_locales:krb5-locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5_locales:krb5_locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"krb5-locales","purl":"pkg:deb/ubuntu/krb5-locales@1.17-6ubuntu4.4?arch=all&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/krb5-locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/krb5-locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/krb5-locales.list"}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-3596","versionConstraint":"< 1.17-6ubuntu4.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-3596","fix":{"state":"fixed","versions":["1.17-6ubuntu4.8"],"available":[{"date":"2025-02-05","kind":"advisory","version":"1.17-6ubuntu4.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-08","epss":0.14859,"percentile":0.9662}],"risk":7.4295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-3596"},"relatedVulnerabilities":[{"id":"CVE-2024-3596","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-08","epss":0.14859,"percentile":0.9662}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/09/4","https://cert-portal.siemens.com/productcert/html/ssa-723487.html","https://cert-portal.siemens.com/productcert/html/ssa-794185.html","https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/","https://datatracker.ietf.org/doc/html/rfc2865","https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014","https://www.blastradius.fail/","https://security.netapp.com/advisory/ntap-20240822-0001/","https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocol","https://www.kb.cert.org/vuls/id/456537","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-770770.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-3596","description":"RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature."}]},{"artifact":{"id":"b88197ff1a531432","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-3596","versionConstraint":"< 1.17-6ubuntu4.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-3596","fix":{"state":"fixed","versions":["1.17-6ubuntu4.8"],"available":[{"date":"2025-02-05","kind":"advisory","version":"1.17-6ubuntu4.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-08","epss":0.14859,"percentile":0.9662}],"risk":7.4295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-3596"},"relatedVulnerabilities":[{"id":"CVE-2024-3596","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-08","epss":0.14859,"percentile":0.9662}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/09/4","https://cert-portal.siemens.com/productcert/html/ssa-723487.html","https://cert-portal.siemens.com/productcert/html/ssa-794185.html","https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/","https://datatracker.ietf.org/doc/html/rfc2865","https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014","https://www.blastradius.fail/","https://security.netapp.com/advisory/ntap-20240822-0001/","https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocol","https://www.kb.cert.org/vuls/id/456537","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-770770.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-3596","description":"RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature."}]},{"artifact":{"id":"205c4946e1a25685","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-3596","versionConstraint":"< 1.17-6ubuntu4.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-3596","fix":{"state":"fixed","versions":["1.17-6ubuntu4.8"],"available":[{"date":"2025-02-05","kind":"advisory","version":"1.17-6ubuntu4.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-08","epss":0.14859,"percentile":0.9662}],"risk":7.4295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-3596"},"relatedVulnerabilities":[{"id":"CVE-2024-3596","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-08","epss":0.14859,"percentile":0.9662}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/09/4","https://cert-portal.siemens.com/productcert/html/ssa-723487.html","https://cert-portal.siemens.com/productcert/html/ssa-794185.html","https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/","https://datatracker.ietf.org/doc/html/rfc2865","https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014","https://www.blastradius.fail/","https://security.netapp.com/advisory/ntap-20240822-0001/","https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocol","https://www.kb.cert.org/vuls/id/456537","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-770770.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-3596","description":"RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature."}]},{"artifact":{"id":"6a71efc1099a31f1","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-3596","versionConstraint":"< 1.17-6ubuntu4.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-3596","fix":{"state":"fixed","versions":["1.17-6ubuntu4.8"],"available":[{"date":"2025-02-05","kind":"advisory","version":"1.17-6ubuntu4.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-08","epss":0.14859,"percentile":0.9662}],"risk":7.4295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-3596"},"relatedVulnerabilities":[{"id":"CVE-2024-3596","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-08","epss":0.14859,"percentile":0.9662}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/09/4","https://cert-portal.siemens.com/productcert/html/ssa-723487.html","https://cert-portal.siemens.com/productcert/html/ssa-794185.html","https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/","https://datatracker.ietf.org/doc/html/rfc2865","https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014","https://www.blastradius.fail/","https://security.netapp.com/advisory/ntap-20240822-0001/","https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocol","https://www.kb.cert.org/vuls/id/456537","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-770770.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-3596","description":"RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature."}]},{"artifact":{"id":"08cd2db1dbbc7a60","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-3596","versionConstraint":"< 1.17-6ubuntu4.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-3596","fix":{"state":"fixed","versions":["1.17-6ubuntu4.8"],"available":[{"date":"2025-02-05","kind":"advisory","version":"1.17-6ubuntu4.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-08","epss":0.14859,"percentile":0.9662}],"risk":7.4295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-3596"},"relatedVulnerabilities":[{"id":"CVE-2024-3596","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-08","epss":0.14859,"percentile":0.9662}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/09/4","https://cert-portal.siemens.com/productcert/html/ssa-723487.html","https://cert-portal.siemens.com/productcert/html/ssa-794185.html","https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/","https://datatracker.ietf.org/doc/html/rfc2865","https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014","https://www.blastradius.fail/","https://security.netapp.com/advisory/ntap-20240822-0001/","https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocol","https://www.kb.cert.org/vuls/id/456537","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-770770.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-3596","description":"RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature."}]},{"artifact":{"id":"246f86e84f40531d","cpes":["cpe:2.3:a:metastuff-ltd-:dom4j:1.6.1:*:*:*:*:*:*:*","cpe:2.3:a:metastuff_ltd_:dom4j:1.6.1:*:*:*:*:*:*:*","cpe:2.3:a:org.dom4j:dom4j:1.6.1:*:*:*:*:*:*:*","cpe:2.3:a:dom4j:dom4j:1.6.1:*:*:*:*:*:*:*"],"name":"dom4j","purl":"pkg:maven/org.dom4j/dom4j@1.6.1","type":"java-archive","version":"1.6.1","language":"java","licenses":["sha256:9a6b4e9e1668b2cc31453527ee07a1a68495f4cae149cfe03a8c955e6093ec55"],"metadata":{"pomGroupID":"org.dom4j","virtualPath":"/usr/lib/unifi/lib/dom4j-1.6.1.jar","manifestName":"","pomArtifactID":"dom4j","archiveDigests":[{"value":"5d3ccc056b6f056dbf0dddfdf43894b9065a8f94","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/dom4j-1.6.1.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/dom4j-1.6.1.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.0.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-hwj3-m3p6-hj38","versionConstraint":"<2.0.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.dom4j:dom4j","version":"1.6.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-hwj3-m3p6-hj38","fix":{"state":"fixed","versions":["2.0.3"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"2.0.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-10683","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-10683","date":"2026-10-08","epss":0.07269,"percentile":0.94202}],"risk":6.83286,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2020-10683","https://github.com/dom4j/dom4j/commit/a8228522a99a02146106672a34c104adbda5c658","https://bugzilla.redhat.com/show_bug.cgi?id=1694235","https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html","https://github.com/dom4j/dom4j/releases/tag/version-2.1.3","https://security.netapp.com/advisory/ntap-20200518-0002/","http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00061.html","https://github.com/dom4j/dom4j/commit/1707bf3d898a8ada3b213acb0e3b38f16eaae73d","https://www.oracle.com/security-alerts/cpujul2020.html","https://github.com/dom4j/dom4j/issues/87","https://github.com/dom4j/dom4j/commits/version-2.0.3","https://lists.apache.org/thread.html/r51f3f9801058e47153c0ad9bc6209d57a592fc0e7aefd787760911b8@%3Cdev.velocity.apache.org%3E","https://lists.apache.org/thread.html/r91c64cd51e68e97d524395474eaa25362d564572276b9917fcbf5c32@%3Cdev.velocity.apache.org%3E","https://usn.ubuntu.com/4575-1/","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://lists.apache.org/thread.html/rb1b990d7920ae0d50da5109b73b92bab736d46c9788dd4b135cb1a51@%3Cnotifications.freemarker.apache.org%3E","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-hwj3-m3p6-hj38","description":"dom4j allows External Entities by default which might enable XXE attacks"},"relatedVulnerabilities":[{"id":"CVE-2020-10683","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-10683","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-10683","date":"2026-10-08","epss":0.07269,"percentile":0.94202}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00061.html","https://bugzilla.redhat.com/show_bug.cgi?id=1694235","https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html","https://github.com/dom4j/dom4j/commit/a8228522a99a02146106672a34c104adbda5c658","https://github.com/dom4j/dom4j/commits/version-2.0.3","https://github.com/dom4j/dom4j/issues/87","https://github.com/dom4j/dom4j/releases/tag/version-2.1.3","https://lists.apache.org/thread.html/r51f3f9801058e47153c0ad9bc6209d57a592fc0e7aefd787760911b8%40%3Cdev.velocity.apache.org%3E","https://lists.apache.org/thread.html/r91c64cd51e68e97d524395474eaa25362d564572276b9917fcbf5c32%40%3Cdev.velocity.apache.org%3E","https://lists.apache.org/thread.html/rb1b990d7920ae0d50da5109b73b92bab736d46c9788dd4b135cb1a51%40%3Cnotifications.freemarker.apache.org%3E","https://security.netapp.com/advisory/ntap-20200518-0002/","https://usn.ubuntu.com/4575-1/","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-10683","description":"dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.98"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-27hp-xhwr-wr2m","versionConstraint":">=9.0.0.M1,<9.0.98 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-27hp-xhwr-wr2m","fix":{"state":"fixed","versions":["9.0.98"],"available":[{"date":"2025-01-09","kind":"first-observed","version":"9.0.98"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-56337","cwe":"CWE-367","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-56337","date":"2026-10-08","epss":0.08969,"percentile":0.95141}],"risk":6.5922149999999995,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-56337","https://lists.apache.org/thread/b2b9qrgjrz1kvo4ym8y2wkfdvwoq6qbp","https://www.cve.org/CVERecord?id=CVE-2024-50379","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.34","https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.2","https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.98","https://security.netapp.com/advisory/ntap-20250103-0002","https://lists.debian.org/debian-lts-announce/2025/01/msg00009.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-27hp-xhwr-wr2m","description":"Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-56337","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-56337","cwe":"CWE-367","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-56337","date":"2026-10-08","epss":0.08969,"percentile":0.95141}],"urls":["https://lists.apache.org/thread/b2b9qrgjrz1kvo4ym8y2wkfdvwoq6qbp","https://www.cve.org/CVERecord?id=CVE-2024-50379","https://lists.debian.org/debian-lts-announce/2025/01/msg00009.html","https://security.netapp.com/advisory/ntap-20250103-0002/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-56337","description":"Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97.\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions \nmay also be affected.\n\n\nThe mitigation for CVE-2024-50379 was incomplete.\n\nUsers running Tomcat on a case insensitive file system with the default servlet write enabled (readonly initialisation \nparameter set to the non-default value of false) may need additional configuration to fully mitigate CVE-2024-50379 depending on which version of Java they are using with Tomcat:\n- running on Java 8 or Java 11: the system property sun.io.useCanonCaches must be explicitly set to false (it defaults to true)\n- running on Java 17: the system property sun.io.useCanonCaches, if set, must be set to false (it defaults to false)\n- running on Java 21 onwards: no further configuration is required (the system property and the problematic cache have been removed)\n\nTomcat 11.0.3, 10.1.35 and 9.0.99 onwards will include checks that sun.io.useCanonCaches is set appropriately before allowing the default servlet to be write enabled on a case insensitive file system. Tomcat will also set sun.io.useCanonCaches to false by default where it can."}]},{"artifact":{"id":"246f86e84f40531d","cpes":["cpe:2.3:a:metastuff-ltd-:dom4j:1.6.1:*:*:*:*:*:*:*","cpe:2.3:a:metastuff_ltd_:dom4j:1.6.1:*:*:*:*:*:*:*","cpe:2.3:a:org.dom4j:dom4j:1.6.1:*:*:*:*:*:*:*","cpe:2.3:a:dom4j:dom4j:1.6.1:*:*:*:*:*:*:*"],"name":"dom4j","purl":"pkg:maven/org.dom4j/dom4j@1.6.1","type":"java-archive","version":"1.6.1","language":"java","licenses":["sha256:9a6b4e9e1668b2cc31453527ee07a1a68495f4cae149cfe03a8c955e6093ec55"],"metadata":{"pomGroupID":"org.dom4j","virtualPath":"/usr/lib/unifi/lib/dom4j-1.6.1.jar","manifestName":"","pomArtifactID":"dom4j","archiveDigests":[{"value":"5d3ccc056b6f056dbf0dddfdf43894b9065a8f94","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/dom4j-1.6.1.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/dom4j-1.6.1.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.0.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-6pcc-3rfx-4gpm","versionConstraint":"<2.0.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.dom4j:dom4j","version":"1.6.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-6pcc-3rfx-4gpm","fix":{"state":"fixed","versions":["2.0.3"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"2.0.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000632","cwe":"CWE-91","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000632","date":"2026-10-08","epss":0.0657,"percentile":0.93655}],"risk":4.9275,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2018-1000632","https://github.com/dom4j/dom4j/issues/48","https://github.com/dom4j/dom4j/commit/c2a99d7dee8ce7a4e5bef134bb781a6672bd8a0f","https://github.com/dom4j/dom4j/commit/e598eb43d418744c4dbf62f647dd2381c9ce9387","https://ihacktoprotect.com/post/dom4j-xml-injection/","https://access.redhat.com/errata/RHSA-2019:0362","https://access.redhat.com/errata/RHSA-2019:0364","https://access.redhat.com/errata/RHSA-2019:0365","https://access.redhat.com/errata/RHSA-2019:0380","https://access.redhat.com/errata/RHSA-2019:1159","https://access.redhat.com/errata/RHSA-2019:1160","https://access.redhat.com/errata/RHSA-2019:1161","https://access.redhat.com/errata/RHSA-2019:1162","https://access.redhat.com/errata/RHSA-2019:3172","https://lists.apache.org/thread.html/00571f362a7a2470fba50a31282c65637c40d2e21ebe6ee535a4ed74@%3Ccommits.maven.apache.org%3E","https://lists.apache.org/thread.html/4a77652531d62299a30815cf5f233af183425db8e3c9a824a814e768@%3Cdev.maven.apache.org%3E","https://lists.apache.org/thread.html/5a020ecaa3c701f408f612f7ba2ee37a021644c4a39da2079ed3ddbc@%3Ccommits.maven.apache.org%3E","https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/7e9e78f0e4288fac6591992836d2a80d4df19161e54bd71ab4b8e458@%3Cdev.maven.apache.org%3E","https://lists.apache.org/thread.html/7f6e120e6ed473f4e00dde4c398fc6698eb383bd7857d20513e989ce@%3Cdev.maven.apache.org%3E","https://lists.apache.org/thread.html/9d4c1af6f702c3d6d6f229de57112ddccac8ce44446a01b7937ab9e0@%3Ccommits.maven.apache.org%3E","https://lists.apache.org/thread.html/d7d960b2778e35ec9b4d40c8efd468c7ce7163bcf6489b633491c89f@%3Cdev.maven.apache.org%3E","https://lists.debian.org/debian-lts-announce/2018/09/msg00028.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IOOVVCRQE6ATFD2JM2EMDXOQXTRIVZGP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJULAHVR3I5SX7OSMXAG75IMNSAYOXGA/","https://security.netapp.com/advisory/ntap-20190530-0001/","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://lists.apache.org/thread.html/rb1b990d7920ae0d50da5109b73b92bab736d46c9788dd4b135cb1a51@%3Cnotifications.freemarker.apache.org%3E"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-6pcc-3rfx-4gpm","description":"Dom4j contains a XML Injection vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2018-1000632","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000632","cwe":"CWE-91","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000632","date":"2026-10-08","epss":0.0657,"percentile":0.93655}],"urls":["https://access.redhat.com/errata/RHSA-2019:0362","https://access.redhat.com/errata/RHSA-2019:0364","https://access.redhat.com/errata/RHSA-2019:0365","https://access.redhat.com/errata/RHSA-2019:0380","https://access.redhat.com/errata/RHSA-2019:1159","https://access.redhat.com/errata/RHSA-2019:1160","https://access.redhat.com/errata/RHSA-2019:1161","https://access.redhat.com/errata/RHSA-2019:1162","https://access.redhat.com/errata/RHSA-2019:3172","https://github.com/dom4j/dom4j/commit/e598eb43d418744c4dbf62f647dd2381c9ce9387","https://github.com/dom4j/dom4j/issues/48","https://ihacktoprotect.com/post/dom4j-xml-injection/","https://lists.apache.org/thread.html/00571f362a7a2470fba50a31282c65637c40d2e21ebe6ee535a4ed74%40%3Ccommits.maven.apache.org%3E","https://lists.apache.org/thread.html/4a77652531d62299a30815cf5f233af183425db8e3c9a824a814e768%40%3Cdev.maven.apache.org%3E","https://lists.apache.org/thread.html/5a020ecaa3c701f408f612f7ba2ee37a021644c4a39da2079ed3ddbc%40%3Ccommits.maven.apache.org%3E","https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E","https://lists.apache.org/thread.html/7e9e78f0e4288fac6591992836d2a80d4df19161e54bd71ab4b8e458%40%3Cdev.maven.apache.org%3E","https://lists.apache.org/thread.html/7f6e120e6ed473f4e00dde4c398fc6698eb383bd7857d20513e989ce%40%3Cdev.maven.apache.org%3E","https://lists.apache.org/thread.html/9d4c1af6f702c3d6d6f229de57112ddccac8ce44446a01b7937ab9e0%40%3Ccommits.maven.apache.org%3E","https://lists.apache.org/thread.html/d7d960b2778e35ec9b4d40c8efd468c7ce7163bcf6489b633491c89f%40%3Cdev.maven.apache.org%3E","https://lists.apache.org/thread.html/rb1b990d7920ae0d50da5109b73b92bab736d46c9788dd4b135cb1a51%40%3Cnotifications.freemarker.apache.org%3E","https://lists.debian.org/debian-lts-announce/2018/09/msg00028.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IOOVVCRQE6ATFD2JM2EMDXOQXTRIVZGP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJULAHVR3I5SX7OSMXAG75IMNSAYOXGA/","https://security.netapp.com/advisory/ntap-20190530-0001/","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000632","description":"dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.109"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vfww-5hm6-hx2j","versionConstraint":">=9.0.40,<9.0.109 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-vfww-5hm6-hx2j","fix":{"state":"fixed","versions":["9.0.109"],"available":[{"date":"2025-10-29","kind":"first-observed","version":"9.0.109"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","metrics":{"baseScore":2.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-55754","cwe":"CWE-150","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-55754","date":"2026-10-08","epss":0.10173,"percentile":0.95555}],"risk":4.5015525,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-55754","https://lists.apache.org/thread/j7w54hqbkfcn0xb9xy0wnx8w5nymcbqd","https://github.com/apache/tomcat/commit/138d7f5cfaae683078948303333c080e6faa75d2","https://github.com/apache/tomcat/commit/5a3db092982c0c58d4855304167ee757fe5e79bb","https://github.com/apache/tomcat/commit/a03cabf3a36a42d27d8d997ed31f034f50ba6cd5","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.45","https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.11","https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.109","http://www.openwall.com/lists/oss-security/2025/10/27/5","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"Low","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vfww-5hm6-hx2j","description":"Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences"},"relatedVulnerabilities":[{"id":"CVE-2025-55754","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":9.6,"impactScore":6.1,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-55754","cwe":"CWE-150","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-55754","date":"2026-10-08","epss":0.10173,"percentile":0.95555}],"urls":["https://lists.apache.org/thread/j7w54hqbkfcn0xb9xy0wnx8w5nymcbqd","http://www.openwall.com/lists/oss-security/2025/10/27/5","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-55754","description":"Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.\n\nTomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a specially crafted URL to inject ANSI escape sequences to manipulate the console and the clipboard and attempt to trick an administrator into running an attacker controlled command. While no attack vector was found, it may have been possible to mount this attack on other operating systems.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.10, from 10.1.0-M1 through 10.1.44, from 9.0.40 through 9.0.108.\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.60 though 8.5.100. Other, older, EOL versions may also be affected.\nUsers are recommended to upgrade to version 11.0.11 or later, 10.1.45 or later or 9.0.109 or later, which fix the issue."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.90"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wm9w-rjj3-j356","versionConstraint":">=9.0.0-M1,<9.0.90 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wm9w-rjj3-j356","fix":{"state":"fixed","versions":["9.0.90"],"available":[{"date":"2024-07-06","kind":"first-observed","version":"9.0.90"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34750","cwe":"CWE-400","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2024-34750","cwe":"CWE-755","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-34750","date":"2026-10-08","epss":0.04602,"percentile":0.91424}],"risk":3.58956,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-34750","https://lists.apache.org/thread/4kqf0bc9gxymjc2x7v3p7dvplnl77y8l","https://github.com/apache/tomcat/commit/2344a4c0d03e307ba6b8ab6dc8b894cc8bac63f2","https://github.com/apache/tomcat/commit/2afae300c9ac9c0e516e2e9de580847d925365c3","https://github.com/apache/tomcat/commit/9fec9a82887853402833a80b584e3762c7423f5f","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html","https://security.netapp.com/advisory/ntap-20240816-0004","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wm9w-rjj3-j356","description":"Apache Tomcat - Denial of Service"},"relatedVulnerabilities":[{"id":"CVE-2024-34750","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34750","cwe":"CWE-400","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2024-34750","cwe":"CWE-755","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-34750","date":"2026-10-08","epss":0.04602,"percentile":0.91424}],"urls":["https://lists.apache.org/thread/4kqf0bc9gxymjc2x7v3p7dvplnl77y8l","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html","https://security.netapp.com/advisory/ntap-20240816-0004/","https://github.com/apache/tomcat/commit/2344a4c0d03e307ba6b8ab6dc8b894cc8bac63f2","https://github.com/apache/tomcat/commit/2afae300c9ac9c0e516e2e9de580847d925365c3","https://github.com/apache/tomcat/commit/9fec9a82887853402833a80b584e3762c7423f5f"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-34750","description":"Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect infinite timeout which allowed connections to remain open which should have been closed.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1 through 9.0.89.\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other EOL versions may also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90, which fixes the issue."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.80"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-q3mw-pvr8-9ggc","versionConstraint":">=9.0.0-M1,<9.0.80 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-q3mw-pvr8-9ggc","fix":{"state":"fixed","versions":["9.0.80"],"available":[{"date":"2023-09-29","kind":"first-observed","version":"9.0.80"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-41080","cwe":"CWE-601","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2023-41080","date":"2026-10-08","epss":0.06047,"percentile":0.93187}],"risk":3.3560849999999998,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-41080","https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f","https://github.com/apache/tomcat/commit/4998ad745b67edeadefe541c94ed029b53933d3b","https://github.com/apache/tomcat/commit/77c0ce2d169efa248b64b992e547aad549ec906b","https://github.com/apache/tomcat/commit/bb4624a9f3e69d495182ebfa68d7983076407a27","https://github.com/apache/tomcat/commit/e3703c9abb8fe0d5602f6ba8a8f11d4b6940815a","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522","https://security.netapp.com/advisory/ntap-20230921-0006"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-q3mw-pvr8-9ggc","description":"Apache Tomcat Open Redirect vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2023-41080","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-41080","cwe":"CWE-601","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2023-41080","date":"2026-10-08","epss":0.06047,"percentile":0.93187}],"urls":["https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://security.netapp.com/advisory/ntap-20230921-0006/","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-41080","description":"URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92.\nOlder, EOL versions may also be affected.\n\n\nThe vulnerability is limited to the ROOT (default) web application."}]},{"artifact":{"id":"33bfbfa0d7f4ffac","cpes":["cpe:2.3:a:org.springframework:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-webmvc:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-webmvc:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_webmvc:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_webmvc:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_webmvc:5.3.22:*:*:*:*:*:*:*"],"name":"spring-webmvc","purl":"pkg:maven/org.springframework/spring-webmvc@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","manifestName":"","pomArtifactID":"spring-webmvc","archiveDigests":[{"value":"519d86b7ac9b8b6bb54739eb4eb73dc13a263b28","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"5.3.26"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7phw-cxx7-q9vq","versionConstraint":">=5.3.0,<5.3.26 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-webmvc","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-7phw-cxx7-q9vq","fix":{"state":"fixed","versions":["5.3.26"],"available":[{"date":"2025-09-24","kind":"first-observed","version":"5.3.26"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-20860","date":"2026-10-08","epss":0.03514,"percentile":0.88889}],"risk":3.1801700000000004,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-20860","https://spring.io/security/cve-2023-20860","https://github.com/spring-projects/spring-framework/commit/202fa5cdb3a3d0cfe6967e85fa167d978244f28a","https://security.netapp.com/advisory/ntap-20230505-0006"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7phw-cxx7-q9vq","description":"Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch"},"relatedVulnerabilities":[{"id":"CVE-2023-20860","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-20860","date":"2026-10-08","epss":0.03514,"percentile":0.88889}],"urls":["https://security.netapp.com/advisory/ntap-20230505-0006/","https://spring.io/security/cve-2023-20860"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-20860","description":"Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using \"**\" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass."}]},{"artifact":{"id":"115f8756a931640f","cpes":["cpe:2.3:a:org.springframework:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_web:5.3.22:*:*:*:*:*:*:*"],"name":"spring-web","purl":"pkg:maven/org.springframework/spring-web@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","manifestName":"","pomArtifactID":"spring-web","archiveDigests":[{"value":"fdab9b8d8df2e6a8fb90f2481c361bcf2c129567","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"5.3.32"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-ccgv-vj62-xf9h","versionConstraint":">=5.3.0,<5.3.32 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-web","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-ccgv-vj62-xf9h","fix":{"state":"fixed","versions":["5.3.32"],"available":[{"date":"2024-02-25","kind":"first-observed","version":"5.3.32"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22243","cwe":"CWE-601","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22243","date":"2026-10-08","epss":0.03967,"percentile":0.9019}],"risk":3.09426,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-22243","https://spring.io/security/cve-2024-22243","https://github.com/spring-projects/spring-framework/blob/main/spring-web/src/main/java/org/springframework/web/util/UriComponentsBuilder.java","https://security.netapp.com/advisory/ntap-20240524-0001","http://seclists.org/fulldisclosure/2024/Sep/24"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-ccgv-vj62-xf9h","description":"Spring Web vulnerable to Open Redirect or Server Side Request Forgery"},"relatedVulnerabilities":[{"id":"CVE-2024-22243","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22243","cwe":"CWE-601","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22243","date":"2026-10-08","epss":0.03967,"percentile":0.9019}],"urls":["https://security.netapp.com/advisory/ntap-20240524-0001/","https://spring.io/security/cve-2024-22243","http://seclists.org/fulldisclosure/2024/Sep/24"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22243","description":"Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.81"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-r6j3-px5g-cq3x","versionConstraint":">=9.0.0-M1,<9.0.81 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-r6j3-px5g-cq3x","fix":{"state":"fixed","versions":["9.0.81"],"available":[{"date":"2023-12-22","kind":"first-observed","version":"9.0.81"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-45648","cwe":"CWE-20","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2023-45648","cwe":"NVD-CWE-Other","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-45648","date":"2026-10-08","epss":0.05848,"percentile":0.92995}],"risk":3.01172,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-45648","https://lists.apache.org/thread/2pv8yz1pyp088tsxfb7ogltk9msk0jdp","http://www.openwall.com/lists/oss-security/2023/10/10/10","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522","https://github.com/apache/tomcat/commit/59583245639d8c42ae0009f4a4a70464d3ea70a0","https://github.com/apache/tomcat/commit/8ecff306507be8e4fd3adee1ae5de1ea6661a8f4","https://github.com/apache/tomcat/commit/eb5c094e5560764cda436362254997511a3ca1f6","https://github.com/apache/tomcat/commit/c83fe47725f7ae9ae213568d9039171124fb7ec6","https://security.netapp.com/advisory/ntap-20231103-0007"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-r6j3-px5g-cq3x","description":"Apache Tomcat Improper Input Validation vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2023-45648","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-45648","cwe":"CWE-20","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2023-45648","cwe":"NVD-CWE-Other","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-45648","date":"2026-10-08","epss":0.05848,"percentile":0.92995}],"urls":["https://lists.apache.org/thread/2pv8yz1pyp088tsxfb7ogltk9msk0jdp","http://www.openwall.com/lists/oss-security/2023/10/10/10","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://security.netapp.com/advisory/ntap-20231103-0007/","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-45648","description":"Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.81 and from 8.5.0 through 8.5.93 did not correctly parse HTTP trailer headers. A specially \ncrafted, invalid trailer header could cause Tomcat to treat a single \nrequest as multiple requests leading to the possibility of request \nsmuggling when behind a reverse proxy.\n\nOlder, EOL versions may also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fix the issue."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-45447","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-45447","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-45447","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2026-45447","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-45447","date":"2026-10-08","epss":0.04002,"percentile":0.90276}],"risk":3.0015,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-45447"},"relatedVulnerabilities":[{"id":"CVE-2026-45447","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45447","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2026-45447","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-45447","date":"2026-10-08","epss":0.04002,"percentile":0.90276}],"urls":["https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c","https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8","https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54","https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c","https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e","https://openssl-library.org/news/secadv/20260609.txt","https://access.redhat.com/errata/RHSA-2026:25237","https://access.redhat.com/errata/RHSA-2026:25239","https://access.redhat.com/errata/RHSA-2026:26275","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:34102","https://access.redhat.com/errata/RHSA-2026:35869","https://access.redhat.com/errata/RHSA-2026:36215","https://access.redhat.com/errata/RHSA-2026:36217","https://access.redhat.com/errata/RHSA-2026:39009","https://access.redhat.com/errata/RHSA-2026:39012","https://access.redhat.com/errata/RHSA-2026:39981","https://access.redhat.com/errata/RHSA-2026:44438","https://access.redhat.com/errata/RHSA-2026:47735","https://access.redhat.com/errata/RHSA-2026:47737","https://access.redhat.com/errata/RHSA-2026:58563","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:66524","https://access.redhat.com/security/cve/CVE-2026-45447","https://bugzilla.redhat.com/show_bug.cgi?id=2481898","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45447","description":"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-45447","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-45447","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-45447","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2026-45447","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-45447","date":"2026-10-08","epss":0.04002,"percentile":0.90276}],"risk":3.0015,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-45447"},"relatedVulnerabilities":[{"id":"CVE-2026-45447","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-45447","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2026-45447","cwe":"CWE-825","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-45447","date":"2026-10-08","epss":0.04002,"percentile":0.90276}],"urls":["https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c","https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8","https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54","https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c","https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e","https://openssl-library.org/news/secadv/20260609.txt","https://access.redhat.com/errata/RHSA-2026:25237","https://access.redhat.com/errata/RHSA-2026:25239","https://access.redhat.com/errata/RHSA-2026:26275","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:34102","https://access.redhat.com/errata/RHSA-2026:35869","https://access.redhat.com/errata/RHSA-2026:36215","https://access.redhat.com/errata/RHSA-2026:36217","https://access.redhat.com/errata/RHSA-2026:39009","https://access.redhat.com/errata/RHSA-2026:39012","https://access.redhat.com/errata/RHSA-2026:39981","https://access.redhat.com/errata/RHSA-2026:44438","https://access.redhat.com/errata/RHSA-2026:47735","https://access.redhat.com/errata/RHSA-2026:47737","https://access.redhat.com/errata/RHSA-2026:58563","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:66524","https://access.redhat.com/security/cve/CVE-2026-45447","https://bugzilla.redhat.com/show_bug.cgi?id=2481898","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-45447","description":"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"e5a53adea30293f1","cpes":["cpe:2.3:a:com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:com.googlecode.owasp-java-html-sanitizer:owasp_java_html_sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:owasp-java-html-sanitizer:owasp-java-html-sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:owasp-java-html-sanitizer:owasp_java_html_sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:owasp_java_html_sanitizer:owasp-java-html-sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:owasp_java_html_sanitizer:owasp_java_html_sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:owasp-java-html:owasp-java-html-sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:owasp-java-html:owasp_java_html_sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:owasp_java_html:owasp-java-html-sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:owasp_java_html:owasp_java_html_sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:googlecode:owasp-java-html-sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:googlecode:owasp_java_html_sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:owasp-java:owasp-java-html-sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:owasp-java:owasp_java_html_sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:owasp_java:owasp-java-html-sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:owasp_java:owasp_java_html_sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:owasp:owasp-java-html-sanitizer:20190503.1:*:*:*:*:*:*:*","cpe:2.3:a:owasp:owasp_java_html_sanitizer:20190503.1:*:*:*:*:*:*:*"],"name":"owasp-java-html-sanitizer","purl":"pkg:maven/com.googlecode.owasp-java-html-sanitizer/owasp-java-html-sanitizer@20190503.1","type":"java-archive","version":"20190503.1","language":"java","licenses":[],"metadata":{"pomGroupID":"com.googlecode.owasp-java-html-sanitizer","virtualPath":"/usr/lib/unifi/lib/owasp-java-html-sanitizer-20190503.1.jar","manifestName":"","pomArtifactID":"owasp-java-html-sanitizer","archiveDigests":[{"value":"d0ec630562761e2cef9286905458d0058f11e4cf","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/owasp-java-html-sanitizer-20190503.1.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/owasp-java-html-sanitizer-20190503.1.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"20211018.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3w73-fmf3-hg5c","versionConstraint":"<20211018.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer","version":"20190503.1"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-3w73-fmf3-hg5c","fix":{"state":"fixed","versions":["20211018.1"],"available":[{"date":"2021-10-20","kind":"first-observed","version":"20211018.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2021-42575","date":"2026-10-08","epss":0.02975,"percentile":0.8686}],"risk":2.7965,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2021-42575","https://docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50/","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3w73-fmf3-hg5c","description":"Policies not properly enforced in OWASP Java HTML Sanitizer"},"relatedVulnerabilities":[{"id":"CVE-2021-42575","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2021-42575","date":"2026-10-08","epss":0.02975,"percentile":0.8686}],"urls":["https://docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50/","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-42575","description":"The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.108"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-gqp3-2cvr-x8m3","versionConstraint":">=9.0.0.M1,<9.0.108 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-gqp3-2cvr-x8m3","fix":{"state":"fixed","versions":["9.0.108"],"available":[{"date":"2025-08-23","kind":"first-observed","version":"9.0.108"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48989","cwe":"CWE-404","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48989","date":"2026-10-08","epss":0.03686,"percentile":0.89395}],"risk":2.7644999999999995,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-48989","https://lists.apache.org/thread/9ydfg0xr0tchmglcprhxgwhj0hfwxlyf","https://github.com/apache/tomcat/commit/73c04a10395774bda71a0b37802cf983662ce255","https://github.com/apache/tomcat/commit/f362c8eb3b8ec5b7f312f7f5610731c0fb299a06","https://github.com/apache/tomcat/commit/f36b8a4eea4ce8a0bc035079e1d259d29f5eb7bf","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html","https://www.kb.cert.org/vuls/id/767506","http://www.openwall.com/lists/oss-security/2025/08/13/2","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-gqp3-2cvr-x8m3","description":"Apache Tomcat Improper Resource Shutdown or Release vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2025-48989","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48989","cwe":"CWE-404","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48989","date":"2026-10-08","epss":0.03686,"percentile":0.89395}],"urls":["https://lists.apache.org/thread/9ydfg0xr0tchmglcprhxgwhj0hfwxlyf","http://www.openwall.com/lists/oss-security/2025/08/13/2","https://www.kb.cert.org/vuls/id/767506","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48989","description":"Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.9, from 10.1.0-M1 through 10.1.43 and from 9.0.0.M1 through 9.0.107. Older, EOL versions may also be affected.\n\nUsers are recommended to upgrade to one of versions 11.0.10, 10.1.44 or 9.0.108 which fix the issue."}]},{"artifact":{"id":"e17b266d1d27c88b","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3","type":"java-archive","version":"2.13.3","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"56deb9ea2c93a7a556b3afbedd616d342963464e","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.13.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rgv9-q543-rqg4","versionConstraint":">=2.13.0,<2.13.4 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.13.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-rgv9-q543-rqg4","fix":{"state":"fixed","versions":["2.13.4"],"available":[{"date":"2022-10-06","kind":"first-observed","version":"2.13.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-42004","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-42004","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-42004","date":"2026-10-08","epss":0.03409,"percentile":0.88544}],"risk":2.6164075,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-42004","https://github.com/FasterXML/jackson-databind/issues/3582","https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50490","https://security.gentoo.org/glsa/202210-21","https://www.debian.org/security/2022/dsa-5283","https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html","https://github.com/FasterXML/jackson-databind/commit/35de19e7144c4df8ab178b800ba86e80c3d84252","https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea","https://security.netapp.com/advisory/ntap-20221118-0008","https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rgv9-q543-rqg4","description":"Uncontrolled Resource Consumption in FasterXML jackson-databind"},"relatedVulnerabilities":[{"id":"CVE-2022-42004","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-42004","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-42004","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-42004","date":"2026-10-08","epss":0.03409,"percentile":0.88544}],"urls":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50490","https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88","https://github.com/FasterXML/jackson-databind/issues/3582","https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html","https://security.gentoo.org/glsa/202210-21","https://security.netapp.com/advisory/ntap-20221118-0008/","https://www.debian.org/security/2022/dsa-5283"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-42004","description":"In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization."}]},{"artifact":{"id":"e17b266d1d27c88b","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3","type":"java-archive","version":"2.13.3","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"56deb9ea2c93a7a556b3afbedd616d342963464e","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.13.4.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-jjjh-jjxp-wpff","versionConstraint":">=2.13.0,<2.13.4.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.13.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-jjjh-jjxp-wpff","fix":{"state":"fixed","versions":["2.13.4.2"],"available":[{"date":"2023-03-16","kind":"first-observed","version":"2.13.4.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-42003","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-42003","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-42003","date":"2026-10-08","epss":0.03409,"percentile":0.88545}],"risk":2.55675,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-42003","https://github.com/FasterXML/jackson-databind/issues/3590","https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51020","https://github.com/FasterXML/jackson-databind/blob/2.13/release-notes/VERSION-2.x","https://security.gentoo.org/glsa/202210-21","https://github.com/FasterXML/jackson-databind/issues/3627","https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea","https://www.debian.org/security/2022/dsa-5283","https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html","https://github.com/FasterXML/jackson-databind/commit/7ba9ac5b87a9d6ac0d2815158ecbeb315ad4dcdc","https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1","https://github.com/FasterXML/jackson-databind/commit/d499f2e7bbc5ebd63af11e1f5cf1989fa323aa45","https://github.com/FasterXML/jackson-databind/commits/jackson-databind-2.4.0-rc1?after=75b97b8519f0d50c62523ad85170d80a197a2c86+174&branch=jackson-databind-2.4.0-rc1&qualified_name=refs%2Ftags%2Fjackson-databind-2.4.0-rc1","https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.13.4.1...jackson-databind-2.13.4.2","https://github.com/FasterXML/jackson-databind/commit/2c4a601c626f7790cad9d3c322d244e182838288","https://security.netapp.com/advisory/ntap-20221124-0004"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-jjjh-jjxp-wpff","description":"Uncontrolled Resource Consumption in Jackson-databind"},"relatedVulnerabilities":[{"id":"CVE-2022-42003","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-42003","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-42003","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-42003","date":"2026-10-08","epss":0.03409,"percentile":0.88545}],"urls":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51020","https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33","https://github.com/FasterXML/jackson-databind/issues/3590","https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html","https://security.gentoo.org/glsa/202210-21","https://security.netapp.com/advisory/ntap-20221124-0004/","https://www.debian.org/security/2022/dsa-5283"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-42003","description":"In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled."}]},{"artifact":{"id":"75f53734df5b814d","cpes":["cpe:2.3:a:com.google.protobuf:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.protobuf:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.protobuf:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf:3.6.0:*:*:*:*:*:*:*"],"name":"protobuf-java","purl":"pkg:maven/com.google.protobuf/protobuf-java@3.6.0","type":"java-archive","version":"3.6.0","language":"java","licenses":["https://opensource.org/licenses/BSD-3-Clause"],"metadata":{"pomGroupID":"com.google.protobuf","virtualPath":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","manifestName":"","pomArtifactID":"protobuf-java","archiveDigests":[{"value":"5333f7e422744d76840c08a106e28e519fbe3acd","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.25.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-735f-pc8j-v9w8","versionConstraint":"<3.25.5 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.google.protobuf:protobuf-java","version":"3.6.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-735f-pc8j-v9w8","fix":{"state":"fixed","versions":["3.25.5"],"available":[{"date":"2024-09-20","kind":"first-observed","version":"3.25.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7254","cwe":"CWE-400","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2024-7254","cwe":"CWE-674","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2024-7254","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7254","date":"2026-10-08","epss":0.02772,"percentile":0.85915}],"risk":2.16216,"urls":["https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-735f-pc8j-v9w8","https://nvd.nist.gov/vuln/detail/CVE-2024-7254","https://github.com/protocolbuffers/protobuf/commit/4728531c162f2f9e8c2ca1add713cfee2db6be3b","https://github.com/protocolbuffers/protobuf/commit/850fcce9176e2c9070614dab53537760498c926b","https://github.com/protocolbuffers/protobuf/commit/9a5f5fe752a20cbac2e722b06949ac985abdd534","https://github.com/protocolbuffers/protobuf/commit/ac9fb5b4c71b0dd80985b27684e265d1f03abf46","https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa","https://github.com/protocolbuffers/protobuf/commit/d6c82fc55a76481c676f541a255571e8950bb8c3","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/google-protobuf/CVE-2024-7254.yml","https://security.netapp.com/advisory/ntap-20241213-0010","https://security.netapp.com/advisory/ntap-20250418-0006"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-735f-pc8j-v9w8","description":"protobuf-java has potential Denial of Service issue"},"relatedVulnerabilities":[{"id":"CVE-2024-7254","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7254","cwe":"CWE-400","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2024-7254","cwe":"CWE-674","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2024-7254","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7254","date":"2026-10-08","epss":0.02772,"percentile":0.85915}],"urls":["https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa","https://security.netapp.com/advisory/ntap-20241213-0010/","https://security.netapp.com/advisory/ntap-20250418-0006/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-7254","description":"Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker."}]},{"artifact":{"id":"ecdba12e72372c34","cpes":["cpe:2.3:a:org.yaml.snakeyaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:snakeyaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:org.yaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:yaml:snakeyaml:1.30:*:*:*:*:*:*:*"],"name":"snakeyaml","purl":"pkg:maven/org.yaml/snakeyaml@1.30","type":"java-archive","version":"1.30","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.yaml","virtualPath":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","manifestName":"","pomArtifactID":"snakeyaml","archiveDigests":[{"value":"8fde7fe2586328ac3c68db92045e1c8759125000","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.31"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3mc7-4q67-w48m","versionConstraint":"<1.31 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.yaml:snakeyaml","version":"1.30"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-3mc7-4q67-w48m","fix":{"state":"fixed","versions":["1.31"],"available":[{"date":"2022-09-12","kind":"first-observed","version":"1.31"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-25857","cwe":"CWE-776","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-25857","date":"2026-10-08","epss":0.02749,"percentile":0.85777}],"risk":2.06175,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-25857","https://github.com/snakeyaml/snakeyaml/commit/fc300780da21f4bb92c148bc90257201220cf174","https://bitbucket.org/snakeyaml/snakeyaml/commits/fc300780da21f4bb92c148bc90257201220cf174","https://bitbucket.org/snakeyaml/snakeyaml/issues/525","https://security.snyk.io/vuln/SNYK-JAVA-ORGYAML-2806360","https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html","https://security.netapp.com/advisory/ntap-20240315-0010"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3mc7-4q67-w48m","description":"Uncontrolled Resource Consumption in snakeyaml"},"relatedVulnerabilities":[{"id":"CVE-2022-25857","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"report@snyk.io","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-25857","cwe":"CWE-776","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-25857","date":"2026-10-08","epss":0.02749,"percentile":0.85777}],"urls":["https://bitbucket.org/snakeyaml/snakeyaml/commits/fc300780da21f4bb92c148bc90257201220cf174","https://bitbucket.org/snakeyaml/snakeyaml/issues/525","https://github.com/snakeyaml/snakeyaml/commit/fc300780da21f4bb92c148bc90257201220cf174","https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html","https://security.netapp.com/advisory/ntap-20240315-0010/","https://security.snyk.io/vuln/SNYK-JAVA-ORGYAML-2806360"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-25857","description":"The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections."}]},{"artifact":{"id":"115f8756a931640f","cpes":["cpe:2.3:a:org.springframework:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_web:5.3.22:*:*:*:*:*:*:*"],"name":"spring-web","purl":"pkg:maven/org.springframework/spring-web@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","manifestName":"","pomArtifactID":"spring-web","archiveDigests":[{"value":"fdab9b8d8df2e6a8fb90f2481c361bcf2c129567","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"5.3.33"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-hgjh-9rj2-g67j","versionConstraint":"<5.3.33 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-web","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-hgjh-9rj2-g67j","fix":{"state":"fixed","versions":["5.3.33"],"available":[{"date":"2024-03-19","kind":"first-observed","version":"5.3.33"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22259","cwe":"CWE-601","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22259","date":"2026-10-08","epss":0.02573,"percentile":0.84713}],"risk":2.00694,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-22259","https://spring.io/security/cve-2024-22259","https://github.com/spring-projects/spring-framework/commit/297cbae2990e1413537c55845a7e0ea0ffd9f9bb","https://github.com/spring-projects/spring-framework/commit/381f790329a48b74c2a49fc1384dd68ca9153501","https://github.com/spring-projects/spring-framework/commit/f2fd2f12269c6a781c5b2c20b3c24141055a3d68","https://security.netapp.com/advisory/ntap-20240524-0002"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-hgjh-9rj2-g67j","description":"Spring Framework URL Parsing with Host Validation Vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-22259","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22259","cwe":"CWE-601","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22259","date":"2026-10-08","epss":0.02573,"percentile":0.84713}],"urls":["https://security.netapp.com/advisory/ntap-20240524-0002/","https://spring.io/security/cve-2024-22259"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22259","description":"Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.83"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-fccv-jmmp-qg76","versionConstraint":">=9.0.0-M1,<9.0.83 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-fccv-jmmp-qg76","fix":{"state":"fixed","versions":["9.0.83"],"available":[{"date":"2023-12-22","kind":"first-observed","version":"9.0.83"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46589","cwe":"CWE-444","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2023-46589","cwe":"CWE-444","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-46589","date":"2026-10-08","epss":0.02651,"percentile":0.8519}],"risk":1.9882499999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-46589","https://lists.apache.org/thread/0rqq6ktozqc42ro8hhxdmmdjm1k1tpxr","http://www.openwall.com/lists/oss-security/2023/11/28/2","https://github.com/apache/tomcat/commit/6f181e1062a472bc5f0234980f66cbde42c1041b","https://github.com/apache/tomcat/commit/7a2d8818fcea0b51747a67af9510ce7977245ebd","https://github.com/apache/tomcat/commit/aa92971e879a519384c517febc39fd04c48d4642","https://github.com/apache/tomcat/commit/b5776d769bffeade865061bc8ecbeb2b56167b08","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-8.html","https://tomcat.apache.org/security-9.html","https://www.openwall.com/lists/oss-security/2023/11/28/2","https://lists.debian.org/debian-lts-announce/2024/01/msg00001.html","https://security.netapp.com/advisory/ntap-20231214-0009"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-fccv-jmmp-qg76","description":"Apache Tomcat Improper Input Validation vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2023-46589","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-46589","cwe":"CWE-444","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2023-46589","cwe":"CWE-444","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-46589","date":"2026-10-08","epss":0.02651,"percentile":0.8519}],"urls":["https://lists.apache.org/thread/0rqq6ktozqc42ro8hhxdmmdjm1k1tpxr","https://www.openwall.com/lists/oss-security/2023/11/28/2","https://lists.debian.org/debian-lts-announce/2024/01/msg00001.html","https://security.netapp.com/advisory/ntap-20231214-0009/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-46589","description":"Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could cause Tomcat to treat a single \nrequest as multiple requests leading to the possibility of request \nsmuggling when behind a reverse proxy.\n\n\nOlder, EOL versions may also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.0-M11 onwards, 10.1.16 onwards, 9.0.83 onwards or 8.5.96 onwards, which fix the issue."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.106"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wc4r-xq3c-5cf3","versionConstraint":">=9.0.0.M1,<=9.0.105 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wc4r-xq3c-5cf3","fix":{"state":"fixed","versions":["9.0.106"],"available":[{"date":"2025-06-17","kind":"first-observed","version":"9.0.106"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-49125","cwe":"CWE-288","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-49125","date":"2026-10-08","epss":0.03437,"percentile":0.88639}],"risk":1.9419049999999998,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-49125","https://lists.apache.org/thread/m66cytbfrty9k7dc4cg6tl1czhsnbywk","https://github.com/apache/tomcat/commit/7617b9c247bc77ed0444dd69adcd8aa48777886c","https://github.com/apache/tomcat/commit/9418e3ff9f1f4c006b4661311ae9376c52d162b9","https://github.com/apache/tomcat/commit/d94bd36fb7eb32e790dae0339bc249069649a637","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html","http://www.openwall.com/lists/oss-security/2025/06/16/2","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wc4r-xq3c-5cf3","description":"Apache Tomcat - Security constraint bypass for pre/post-resources"},"relatedVulnerabilities":[{"id":"CVE-2025-49125","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-49125","cwe":"CWE-288","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-49125","date":"2026-10-08","epss":0.03437,"percentile":0.88639}],"urls":["https://lists.apache.org/thread/m66cytbfrty9k7dc4cg6tl1czhsnbywk","http://www.openwall.com/lists/oss-security/2025/06/16/2","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-49125","description":"Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat.  When using PreResources or PostResources mounted other than at the root of the web application, it was possible to access those resources via an unexpected path. That path was likely not to be protected by the same security constraints as the expected path, allowing those security constraints to be bypassed.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105.\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions \nmay also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.69"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rq2w-37h9-vg94","versionConstraint":">=9.0.40,<=9.0.68 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-rq2w-37h9-vg94","fix":{"state":"fixed","versions":["9.0.69"],"available":[{"date":"2024-04-24","kind":"first-observed","version":"9.0.69"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45143","cwe":"CWE-116","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2022-45143","cwe":"CWE-116","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-45143","date":"2026-10-08","epss":0.02505,"percentile":0.84253}],"risk":1.87875,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-45143","https://lists.apache.org/thread/yqkd183xrw3wqvnpcg3osbcryq85fkzj","https://github.com/apache/tomcat/commit/0cab3a56bd89f70e7481bb0d68395dc7e130dbbf","https://github.com/apache/tomcat/commit/6a0ac6a438cbbb66b6e9c5223842f53bf0cb50aa","https://github.com/apache/tomcat/commit/b336f4e58893ea35114f1e4a415657f723b1298e","https://security.gentoo.org/glsa/202305-37"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rq2w-37h9-vg94","description":"Apache Tomcat improperly escapes input from JsonErrorReportValve"},"relatedVulnerabilities":[{"id":"CVE-2022-45143","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45143","cwe":"CWE-116","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2022-45143","cwe":"CWE-116","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-45143","date":"2026-10-08","epss":0.02505,"percentile":0.84253}],"urls":["https://lists.apache.org/thread/yqkd183xrw3wqvnpcg3osbcryq85fkzj","https://security.gentoo.org/glsa/202305-37","https://security.netapp.com/advisory/ntap-20230216-0009/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-45143","description":"The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or manipulated the JSON output."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1f-1ubuntu2.24"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-9143","versionConstraint":"< 1.1.1f-1ubuntu2.24 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-9143","fix":{"state":"fixed","versions":["1.1.1f-1ubuntu2.24"],"available":[{"date":"2025-02-20","kind":"advisory","version":"1.1.1f-1ubuntu2.24"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-9143","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-9143","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-9143","date":"2026-10-08","epss":0.05842,"percentile":0.92986}],"risk":1.7526,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-9143"},"relatedVulnerabilities":[{"id":"CVE-2024-9143","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9143","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-9143","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-9143","date":"2026-10-08","epss":0.05842,"percentile":0.92986}],"urls":["https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712","https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700","https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4","https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154","https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a","https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41","https://openssl-library.org/news/secadv/20241016.txt","http://www.openwall.com/lists/oss-security/2024/10/16/1","http://www.openwall.com/lists/oss-security/2024/10/23/1","http://www.openwall.com/lists/oss-security/2024/10/24/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20241101-0001/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-9143","description":"Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1f-1ubuntu2.24"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-9143","versionConstraint":"< 1.1.1f-1ubuntu2.24 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-9143","fix":{"state":"fixed","versions":["1.1.1f-1ubuntu2.24"],"available":[{"date":"2025-02-20","kind":"advisory","version":"1.1.1f-1ubuntu2.24"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-9143","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-9143","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-9143","date":"2026-10-08","epss":0.05842,"percentile":0.92986}],"risk":1.7526,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-9143"},"relatedVulnerabilities":[{"id":"CVE-2024-9143","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-9143","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-9143","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-9143","date":"2026-10-08","epss":0.05842,"percentile":0.92986}],"urls":["https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712","https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700","https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4","https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154","https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a","https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41","https://openssl-library.org/news/secadv/20241016.txt","http://www.openwall.com/lists/oss-security/2024/10/16/1","http://www.openwall.com/lists/oss-security/2024/10/23/1","http://www.openwall.com/lists/oss-security/2024/10/24/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20241101-0001/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-9143","description":"Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted\nexplicit values for the field polynomial can lead to out-of-bounds memory reads\nor writes.\n\nImpact summary: Out of bound memory writes can lead to an application crash or\neven a possibility of a remote code execution, however, in all the protocols\ninvolving Elliptic Curve Cryptography that we're aware of, either only \"named\ncurves\" are supported, or, if explicit curve parameters are supported, they\nspecify an X9.62 encoding of binary (GF(2^m)) curves that can't represent\nproblematic input values. Thus the likelihood of existence of a vulnerable\napplication is low.\n\nIn particular, the X9.62 encoding is used for ECC keys in X.509 certificates,\nso problematic inputs cannot occur in the context of processing X.509\ncertificates.  Any problematic use-cases would have to be using an \"exotic\"\ncurve encoding.\n\nThe affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(),\nand various supporting BN_GF2m_*() functions.\n\nApplications working with \"exotic\" explicit binary (GF(2^m)) curve parameters,\nthat make it possible to represent invalid field polynomials with a zero\nconstant term, via the above or similar APIs, may terminate abruptly as a\nresult of reading or writing outside of array bounds.  Remote code execution\ncannot easily be ruled out.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1f-1ubuntu2.23"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-5535","versionConstraint":"< 1.1.1f-1ubuntu2.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-5535","fix":{"state":"fixed","versions":["1.1.1f-1ubuntu2.23"],"available":[{"date":"2024-07-31","kind":"advisory","version":"1.1.1f-1ubuntu2.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-5535","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-5535","date":"2026-10-08","epss":0.05582,"percentile":0.92684}],"risk":1.6746,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-5535"},"relatedVulnerabilities":[{"id":"CVE-2024-5535","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-5535","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-5535","date":"2026-10-08","epss":0.05582,"percentile":0.92684}],"urls":["https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37","https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e","https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c","https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c","https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c","https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87","https://www.openssl.org/news/secadv/20240627.txt","http://www.openwall.com/lists/oss-security/2024/06/27/1","http://www.openwall.com/lists/oss-security/2024/06/28/4","http://www.openwall.com/lists/oss-security/2024/08/15/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240712-0005/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-5535","description":"Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a \"no overlap\"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1f-1ubuntu2.23"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-5535","versionConstraint":"< 1.1.1f-1ubuntu2.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-5535","fix":{"state":"fixed","versions":["1.1.1f-1ubuntu2.23"],"available":[{"date":"2024-07-31","kind":"advisory","version":"1.1.1f-1ubuntu2.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-5535","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-5535","date":"2026-10-08","epss":0.05582,"percentile":0.92684}],"risk":1.6746,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-5535"},"relatedVulnerabilities":[{"id":"CVE-2024-5535","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-5535","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-5535","date":"2026-10-08","epss":0.05582,"percentile":0.92684}],"urls":["https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37","https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e","https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c","https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c","https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c","https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87","https://www.openssl.org/news/secadv/20240627.txt","http://www.openwall.com/lists/oss-security/2024/06/27/1","http://www.openwall.com/lists/oss-security/2024/06/28/4","http://www.openwall.com/lists/oss-security/2024/08/15/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240712-0005/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-5535","description":"Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a \"no overlap\"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.118"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-r29c-68gh-xp6x","versionConstraint":">=8.5.0,<9.0.118 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-r29c-68gh-xp6x","fix":{"state":"fixed","versions":["9.0.118"],"available":[{"date":"2026-05-19","kind":"first-observed","version":"9.0.118"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41293","cwe":"CWE-20","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-41293","date":"2026-10-08","epss":0.0168,"percentile":0.76229}],"risk":1.5792000000000002,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-41293","https://lists.apache.org/thread/qwg0q16z7xkb2qrr853wdll5531mvl1r","http://www.openwall.com/lists/oss-security/2026/05/12/13","https://github.com/apache/tomcat/commit/19f17a257797e8d139b33ff9c88d362a273be148","https://github.com/apache/tomcat/commit/1c70480466572c9192ed412ebefcd43fc63137fd","https://github.com/apache/tomcat/commit/2a2476460e823789f530a22207873ea8cd6eff3b","https://github.com/apache/tomcat/commit/3915fd27e6810b14ccd21e3d900bd8faef44d3df","https://github.com/apache/tomcat/commit/57c2b3bfd62792631e1df24cf4237b990a0b36fa","https://github.com/apache/tomcat/commit/c2925554c677da57390f940d856871e18daaacab","https://github.com/apache/tomcat/commit/cf9452443bcbf3b1a4b435ef7d624364f1b65ca3","https://github.com/apache/tomcat/commit/e5cef9618c3f4fd31bd6fb1e83f0f18022280dac","https://github.com/apache/tomcat/commit/f72a6174ab1f0f5a053435f80448b4f6837fe6d7","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-r29c-68gh-xp6x","description":"Apache Tomcat - HTTP/2 request headers not validated"},"relatedVulnerabilities":[{"id":"CVE-2026-41293","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41293","cwe":"CWE-20","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-41293","date":"2026-10-08","epss":0.0168,"percentile":0.76229}],"urls":["https://lists.apache.org/thread/qwg0q16z7xkb2qrr853wdll5531mvl1r","http://www.openwall.com/lists/oss-security/2026/05/12/13"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-41293","description":"Improper Input Validation vulnerability in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 10.0.0-M1 through 10.0.27.\nOlder, end of support versions may also be affected.\n\nUsers are recommended to upgrade to version [FIXED_VERSION], which fixes the issue."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.107"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wr62-c79q-cv37","versionConstraint":">=9.0.0.M1,<9.0.107 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wr62-c79q-cv37","fix":{"state":"fixed","versions":["9.0.107"],"available":[{"date":"2026-03-07","kind":"first-observed","version":"9.0.107"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52520","cwe":"CWE-190","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-52520","date":"2026-10-08","epss":0.02102,"percentile":0.81149}],"risk":1.5765000000000002,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-52520","https://lists.apache.org/thread/trqq01bbxw6c92zx69kx2mw2qgmfy0o5","https://github.com/apache/tomcat/commit/927d66fbc294cb65242102b817a45fd80834e040","https://github.com/apache/tomcat/commit/a51e4bedccfafd35b7cdd0ee3e22267dee9f90db","https://github.com/apache/tomcat/commit/fc42bbccb9041fafd194fbfdf3eab1d44cb5c45c","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html","http://www.openwall.com/lists/oss-security/2025/07/10/12"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wr62-c79q-cv37","description":"Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits"},"relatedVulnerabilities":[{"id":"CVE-2025-52520","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52520","cwe":"CWE-190","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-52520","date":"2026-10-08","epss":0.02102,"percentile":0.81149}],"urls":["https://lists.apache.org/thread/trqq01bbxw6c92zx69kx2mw2qgmfy0o5","http://www.openwall.com/lists/oss-security/2025/07/10/12","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-52520","description":"For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42, from 9.0.0.M1 through 9.0.106.\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions \nmay also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.9, 10.1.43 or 9.0.107, which fix the issue."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.107"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-25xr-qj8w-c4vf","versionConstraint":">=9.0.0.M1,<9.0.107 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-25xr-qj8w-c4vf","fix":{"state":"fixed","versions":["9.0.107"],"available":[{"date":"2026-03-07","kind":"first-observed","version":"9.0.107"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-53506","cwe":"CWE-400","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-53506","date":"2026-10-08","epss":0.02035,"percentile":0.80491}],"risk":1.52625,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-53506","https://lists.apache.org/thread/p09775q0rd185m6zz98krg0fp45j8kr0","https://github.com/apache/tomcat/commit/2aa6261276ebe50b99276953591e3a2be7898bdb","https://github.com/apache/tomcat/commit/434772930f362145516dd60681134e7f0cf8115b","https://github.com/apache/tomcat/commit/be8f330f83ceddaf3baeed57522e571572b6b99b","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html","http://www.openwall.com/lists/oss-security/2025/07/10/13"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-25xr-qj8w-c4vf","description":"Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams"},"relatedVulnerabilities":[{"id":"CVE-2025-53506","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-53506","cwe":"CWE-400","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-53506","date":"2026-10-08","epss":0.02035,"percentile":0.80491}],"urls":["https://lists.apache.org/thread/p09775q0rd185m6zz98krg0fp45j8kr0","http://www.openwall.com/lists/oss-security/2025/07/10/13","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-53506","description":"Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the maximum permitted concurrent streams.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42, from 9.0.0.M1 through 9.0.106.\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 through 8.5.100. Other EOL versions may also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.9, 10.1.43 or 9.0.107, which fix the issue."}]},{"artifact":{"id":"16b8b8f03be333e3","cpes":["cpe:2.3:a:apache:commons-beanutils:1.9.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_beanutils:1.9.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:beanutils:1.9.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:1.9.2:*:*:*:*:*:*:*"],"name":"commons-beanutils","purl":"pkg:maven/commons-beanutils/commons-beanutils@1.9.2","type":"java-archive","version":"1.9.2","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"commons-beanutils","virtualPath":"/usr/lib/unifi/lib/commons-beanutils-1.9.2.jar","manifestName":"","pomArtifactID":"commons-beanutils","archiveDigests":[{"value":"7a87d845ad3a155297e8f67d9008f4c1e5656b71","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/commons-beanutils-1.9.2.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/commons-beanutils-1.9.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.11.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wxr5-93ph-8wr9","versionConstraint":">=1.0,<=1.10.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"commons-beanutils:commons-beanutils","version":"1.9.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wxr5-93ph-8wr9","fix":{"state":"fixed","versions":["1.11.0"],"available":[{"date":"2025-05-29","kind":"first-observed","version":"1.11.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48734","cwe":"CWE-284","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2025-48734","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-48734","date":"2026-10-08","epss":0.01825,"percentile":0.78153}],"risk":1.487375,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-48734","https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9","https://github.com/apache/commons-beanutils/commit/bd20740da25b69552ddef8523beec0837297eaf9","http://www.openwall.com/lists/oss-security/2025/05/28/6","https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wxr5-93ph-8wr9","description":"Apache Commons Improper Access Control vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2025-48734","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48734","cwe":"CWE-284","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2025-48734","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-48734","date":"2026-10-08","epss":0.01825,"percentile":0.78153}],"urls":["https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9","http://www.openwall.com/lists/oss-security/2025/05/28/6","https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48734","description":"Improper Access Control vulnerability in Apache Commons.\n\n\n\nA special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this protection was not enabled by default. PropertyUtilsBean (and consequently BeanUtilsBean) now disallows declared class level property access by default.\n\n\n\n\n\nReleases 1.11.0 and 2.0.0-M2 address a potential security issue when accessing enum properties in an uncontrolled way. If an application using Commons BeanUtils passes property paths from an external source directly to the getProperty() method of PropertyUtilsBean, an attacker can access the enum’s class loader via the “declaredClass” property available on all Java “enum” objects. Accessing the enum’s “declaredClass” allows remote attackers to access the ClassLoader and execute arbitrary code. The same issue exists with PropertyUtilsBean.getNestedProperty().\nStarting in versions 1.11.0 and 2.0.0-M2 a special BeanIntrospector suppresses the “declaredClass” property. Note that this new BeanIntrospector is enabled by default, but you can disable it to regain the old behavior; see section 2.5 of the user's guide and the unit tests.\n\nThis issue affects Apache Commons BeanUtils 1.x before 1.11.0, and 2.x before 2.0.0-M2.Users of the artifact commons-beanutils:commons-beanutils\n\n 1.x are recommended to upgrade to version 1.11.0, which fixes the issue.\n\n\nUsers of the artifact org.apache.commons:commons-beanutils2\n\n 2.x are recommended to upgrade to version 2.0.0-M2, which fixes the issue."}]},{"artifact":{"id":"ecdba12e72372c34","cpes":["cpe:2.3:a:org.yaml.snakeyaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:snakeyaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:org.yaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:yaml:snakeyaml:1.30:*:*:*:*:*:*:*"],"name":"snakeyaml","purl":"pkg:maven/org.yaml/snakeyaml@1.30","type":"java-archive","version":"1.30","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.yaml","virtualPath":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","manifestName":"","pomArtifactID":"snakeyaml","archiveDigests":[{"value":"8fde7fe2586328ac3c68db92045e1c8759125000","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.32"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9w3m-gqgf-c4p9","versionConstraint":"<1.32 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.yaml:snakeyaml","version":"1.30"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-9w3m-gqgf-c4p9","fix":{"state":"fixed","versions":["1.32"],"available":[{"date":"2022-09-15","kind":"first-observed","version":"1.32"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-38752","cwe":"CWE-121","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-38752","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-38752","date":"2026-10-08","epss":0.02526,"percentile":0.84409}],"risk":1.45245,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-38752","https://bitbucket.org/snakeyaml/snakeyaml/issues/531/stackoverflow-oss-fuzz-47081","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47081","https://security.gentoo.org/glsa/202305-28","https://security.netapp.com/advisory/ntap-20240315-0009"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9w3m-gqgf-c4p9","description":"snakeYAML before 1.32 vulnerable to Denial of Service due to Out-of-bounds Write"},"relatedVulnerabilities":[{"id":"CVE-2022-38752","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-38752","cwe":"CWE-121","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-38752","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-38752","date":"2026-10-08","epss":0.02526,"percentile":0.84409}],"urls":["https://bitbucket.org/snakeyaml/snakeyaml/issues/531/stackoverflow-oss-fuzz-47081","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47081","https://security.gentoo.org/glsa/202305-28","https://security.netapp.com/advisory/ntap-20240315-0009/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-38752","description":"Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow."}]},{"artifact":{"id":"5a319657ca71d7bc","cpes":["cpe:2.3:a:apache:commons-lang3:3.12.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_lang3:3.12.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:3.12.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:lang3:3.12.0:*:*:*:*:*:*:*"],"name":"commons-lang3","purl":"pkg:maven/org.apache.commons/commons-lang3@3.12.0","type":"java-archive","version":"3.12.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.commons","virtualPath":"/usr/lib/unifi/lib/commons-lang3-3.12.0.jar","manifestName":"","pomArtifactID":"commons-lang3","archiveDigests":[{"value":"c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/commons-lang3-3.12.0.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/commons-lang3-3.12.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.18.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-j288-q9x7-2f5v","versionConstraint":">=3.0,<3.18.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.commons:commons-lang3","version":"3.12.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-j288-q9x7-2f5v","fix":{"state":"fixed","versions":["3.18.0"],"available":[{"date":"2025-07-12","kind":"first-observed","version":"3.18.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48924","cwe":"CWE-674","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48924","date":"2026-10-08","epss":0.02451,"percentile":0.83897}],"risk":1.409325,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-48924","https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1","https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53","https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html","http://www.openwall.com/lists/oss-security/2025/07/11/1"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-j288-q9x7-2f5v","description":"Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs"},"relatedVulnerabilities":[{"id":"CVE-2025-48924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-48924","cwe":"CWE-674","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-48924","date":"2026-10-08","epss":0.02451,"percentile":0.83897}],"urls":["https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1","http://www.openwall.com/lists/oss-security/2025/07/11/1","https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-48924","description":"Uncontrolled Recursion vulnerability in Apache Commons Lang.\n\nThis issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0.\n\nThe methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a \nStackOverflowError could cause an application to stop.\n\nUsers are recommended to upgrade to version 3.18.0, which fixes the issue."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1f-1ubuntu2.21"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5678","versionConstraint":"< 1.1.1f-1ubuntu2.21 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-5678","fix":{"state":"fixed","versions":["1.1.1f-1ubuntu2.21"],"available":[{"date":"2024-02-05","kind":"advisory","version":"1.1.1f-1ubuntu2.21"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-08","epss":0.04459,"percentile":0.9119}],"risk":1.3377,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-5678"},"relatedVulnerabilities":[{"id":"CVE-2023-5678","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-08","epss":0.04459,"percentile":0.9119}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6","https://www.openssl.org/news/secadv/20231106.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20231130-0010/","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-128433.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-556635.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5678","description":"Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1f-1ubuntu2.21"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-5678","versionConstraint":"< 1.1.1f-1ubuntu2.21 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-5678","fix":{"state":"fixed","versions":["1.1.1f-1ubuntu2.21"],"available":[{"date":"2024-02-05","kind":"advisory","version":"1.1.1f-1ubuntu2.21"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-08","epss":0.04459,"percentile":0.9119}],"risk":1.3377,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-5678"},"relatedVulnerabilities":[{"id":"CVE-2023-5678","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-08","epss":0.04459,"percentile":0.9119}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6","https://www.openssl.org/news/secadv/20231106.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20231130-0010/","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-128433.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-556635.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5678","description":"Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.90"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7jqf-v358-p8g7","versionConstraint":">=9.0.13,<9.0.90 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-7jqf-v358-p8g7","fix":{"state":"fixed","versions":["9.0.90"],"available":[{"date":"2026-07-01","kind":"first-observed","version":"9.0.90"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","metrics":{"baseScore":8.6,"impactScore":4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38286","cwe":"CWE-770","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-38286","date":"2026-10-08","epss":0.0169,"percentile":0.7637}],"risk":1.3224249999999997,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-38286","https://lists.apache.org/thread/wms60cvbsz3fpbz9psxtfx8r41jl6d4s","https://github.com/apache/tomcat/commit/3197862639732e16ec1164557bcd289ebc116c93","https://github.com/apache/tomcat/commit/3344c17cef094da4bb616f4186ed32039627b543","https://github.com/apache/tomcat/commit/76c5cce6f0bcef14b0c21c38910371ca7d322d13","https://security.netapp.com/advisory/ntap-20241101-0010","http://www.openwall.com/lists/oss-security/2024/09/23/2","https://lists.debian.org/debian-lts-announce/2025/01/msg00009.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7jqf-v358-p8g7","description":"Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2024-38286","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@apache.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","metrics":{"baseScore":8.6,"impactScore":4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38286","cwe":"CWE-770","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-38286","date":"2026-10-08","epss":0.0169,"percentile":0.7637}],"urls":["https://lists.apache.org/thread/wms60cvbsz3fpbz9psxtfx8r41jl6d4s","http://www.openwall.com/lists/oss-security/2024/09/23/2","https://lists.debian.org/debian-lts-announce/2025/01/msg00009.html","https://security.netapp.com/advisory/ntap-20241101-0010/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-38286","description":"Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.13 through 9.0.89.\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.35 through 8.5.100 and 7.0.92 through 7.0.109. Other EOL versions may also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.0-M21, 10.1.25, or 9.0.90, which fixes the issue.\n\n\n\nApache Tomcat, under certain configurations on any platform, allows an attacker to cause an OutOfMemoryError by abusing the TLS handshake process."}]},{"artifact":{"id":"13bfa0f4f9d8aee0","cpes":["cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:snappy:1.1.8.4:*:*:*:*:*:*:*"],"name":"snappy-java","purl":"pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4","type":"java-archive","version":"1.1.8.4","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.xerial.snappy","virtualPath":"/usr/lib/unifi/lib/snappy-java-1.1.8.4.jar","manifestName":"","pomArtifactID":"snappy-java","archiveDigests":[{"value":"66f0d56454509f6e36175f2331572e250e04a6cc","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/snappy-java-1.1.8.4.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/snappy-java-1.1.8.4.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.1.10.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qcwq-55hx-v3vh","versionConstraint":"<=1.1.10.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.xerial.snappy:snappy-java","version":"1.1.8.4"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-qcwq-55hx-v3vh","fix":{"state":"fixed","versions":["1.1.10.1"],"available":[{"date":"2023-06-16","kind":"first-observed","version":"1.1.10.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34455","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-34455","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34455","date":"2026-10-08","epss":0.01762,"percentile":0.7733}],"risk":1.3215000000000001,"urls":["https://github.com/xerial/snappy-java/security/advisories/GHSA-qcwq-55hx-v3vh","https://github.com/xerial/snappy-java/commit/3bf67857fcf70d9eea56eed4af7c925671e8eaea","https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/SnappyInputStream.java#L388","https://github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/SnappyInputStream.java","https://nvd.nist.gov/vuln/detail/CVE-2023-34455","https://security.netapp.com/advisory/ntap-20230818-0009/"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qcwq-55hx-v3vh","description":"snappy-java's unchecked chunk length leads to DoS"},"relatedVulnerabilities":[{"id":"CVE-2023-34455","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34455","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2023-34455","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34455","date":"2026-10-08","epss":0.01762,"percentile":0.7733}],"urls":["https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/SnappyInputStream.java#L388","https://github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/SnappyInputStream.java","https://github.com/xerial/snappy-java/commit/3bf67857fcf70d9eea56eed4af7c925671e8eaea","https://github.com/xerial/snappy-java/security/advisories/GHSA-qcwq-55hx-v3vh","https://security.netapp.com/advisory/ntap-20230818-0009/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34455","description":"snappy-java is a fast compressor/decompressor for Java. Due to use of an unchecked chunk length, an unrecoverable fatal error can occur in versions prior to 1.1.10.1.\n\nThe code in the function hasNextChunk in the fileSnappyInputStream.java checks if a given stream has more chunks to read. It does that by attempting to read 4 bytes. If it wasn’t possible to read the 4 bytes, the function returns false. Otherwise, if 4 bytes were available, the code treats them as the length of the next chunk.\n\nIn the case that the `compressed` variable is null, a byte array is allocated with the size given by the input data. Since the code doesn’t test the legality of the `chunkSize` variable, it is possible to pass a negative number (such as 0xFFFFFFFF which is -1), which will cause the code to raise a `java.lang.NegativeArraySizeException` exception. A worse case would happen when passing a huge positive value (such as 0x7FFFFFFF), which would raise the fatal `java.lang.OutOfMemoryError` error.\n\nVersion 1.1.10.1 contains a patch for this issue."}]},{"artifact":{"id":"00c1b93fb5d82df0","cpes":["cpe:2.3:a:apache:tomcat-embed-websocket:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_websocket:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-websocket","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-websocket-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-websocket","archiveDigests":[{"value":"bd70dfeb39cc83c6934be24fa377b21e541dbe76","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-websocket-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-websocket-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.86"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-v682-8vv8-vpwr","versionConstraint":">=9.0.0-M1,<=9.0.85 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-websocket","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-v682-8vv8-vpwr","fix":{"state":"fixed","versions":["9.0.86"],"available":[{"date":"2024-04-12","kind":"first-observed","version":"9.0.86"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-23672","cwe":"CWE-459","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-23672","date":"2026-10-08","epss":0.02313,"percentile":0.82886}],"risk":1.3068449999999998,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-23672","https://lists.apache.org/thread/cmpswfx6tj4s7x0nxxosvfqs11lvdx2f","https://github.com/apache/tomcat/commit/0052b374684b613b0c849899b325ebe334ac6501","https://github.com/apache/tomcat/commit/3631adb1342d8bbd8598802a12b63ad02c37d591","https://github.com/apache/tomcat/commit/52d6650e062d880704898d7d8c1b2b7a3efe8068","https://github.com/apache/tomcat/commit/b0e3b1bd78de270d53e319d7cb79eb282aa53cb9","https://security.netapp.com/advisory/ntap-20240402-0002","https://lists.debian.org/debian-lts-announce/2024/04/msg00001.html","http://www.openwall.com/lists/oss-security/2024/03/13/4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/736G4GPZWS2DSQO5WKXO3G6OMZKFEK55","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UWIS5MMGYDZBLJYT674ZI5AWFHDZ46B"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-v682-8vv8-vpwr","description":"Denial of Service via incomplete cleanup vulnerability in Apache Tomcat"},"relatedVulnerabilities":[{"id":"CVE-2024-23672","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-23672","cwe":"CWE-459","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-23672","date":"2026-10-08","epss":0.02313,"percentile":0.82886}],"urls":["https://lists.apache.org/thread/cmpswfx6tj4s7x0nxxosvfqs11lvdx2f","http://www.openwall.com/lists/oss-security/2024/03/13/4","https://lists.debian.org/debian-lts-announce/2024/04/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UWIS5MMGYDZBLJYT674ZI5AWFHDZ46B/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/736G4GPZWS2DSQO5WKXO3G6OMZKFEK55/","https://security.netapp.com/advisory/ntap-20240402-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-23672","description":"Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for WebSocket clients to keep WebSocket connections open leading to increased resource consumption.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from 9.0.0-M1 through 9.0.85, from 8.5.0 through 8.5.98.\n\nOlder, EOL versions may also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue."}]},{"artifact":{"id":"75f53734df5b814d","cpes":["cpe:2.3:a:com.google.protobuf:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.protobuf:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.protobuf:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf:3.6.0:*:*:*:*:*:*:*"],"name":"protobuf-java","purl":"pkg:maven/com.google.protobuf/protobuf-java@3.6.0","type":"java-archive","version":"3.6.0","language":"java","licenses":["https://opensource.org/licenses/BSD-3-Clause"],"metadata":{"pomGroupID":"com.google.protobuf","virtualPath":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","manifestName":"","pomArtifactID":"protobuf-java","archiveDigests":[{"value":"5333f7e422744d76840c08a106e28e519fbe3acd","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.16.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wrvw-hg22-4m67","versionConstraint":"<3.16.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.google.protobuf:protobuf-java","version":"3.6.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wrvw-hg22-4m67","fix":{"state":"fixed","versions":["3.16.1"],"available":[{"date":"2022-01-08","kind":"first-observed","version":"3.16.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22569","cwe":"CWE-696","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2021-22569","date":"2026-10-08","epss":0.01669,"percentile":0.76063}],"risk":1.2517500000000001,"urls":["https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-wrvw-hg22-4m67","https://nvd.nist.gov/vuln/detail/CVE-2021-22569","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39330","https://cloud.google.com/support/bulletins#gcp-2022-001","http://www.openwall.com/lists/oss-security/2022/01/12/4","http://www.openwall.com/lists/oss-security/2022/01/12/7","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wrvw-hg22-4m67","description":"A potential Denial of Service issue in protobuf-java"},"relatedVulnerabilities":[{"id":"CVE-2021-22569","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22569","cwe":"CWE-696","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2021-22569","date":"2026-10-08","epss":0.01669,"percentile":0.76063}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/12/4","http://www.openwall.com/lists/oss-security/2022/01/12/7","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39330","https://cloud.google.com/support/bulletins#gcp-2022-001","https://lists.debian.org/debian-lts-announce/2023/04/msg00019.html","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-22569","description":"An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause frequent, repeated pauses. We recommend upgrading libraries beyond the vulnerable versions."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.118"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h6fc-48rj-7qqh","versionConstraint":"<9.0.118 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-h6fc-48rj-7qqh","fix":{"state":"fixed","versions":["9.0.118"],"available":[{"date":"2026-05-19","kind":"first-observed","version":"9.0.118"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-43512","cwe":"CWE-592","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-43512","date":"2026-10-08","epss":0.01326,"percentile":0.70119}],"risk":1.24644,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-43512","https://lists.apache.org/thread/7x09x7o12solvclslw3sz0288xc8wx73","http://www.openwall.com/lists/oss-security/2026/05/12/8","https://github.com/apache/tomcat/commit/3d4d3fae07a6cd9c2eb193c5491001740ec64448","https://github.com/apache/tomcat/commit/6565a6cb6499e56fe2f34457cec99f9d1c4f39e9","https://github.com/apache/tomcat/commit/a99c355e8199adbfd67c9a1fffbd85b810b196cd","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h6fc-48rj-7qqh","description":"Apache Tomcat - Digest authenticator will authenticate any unknown user"},"relatedVulnerabilities":[{"id":"CVE-2026-43512","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-43512","cwe":"CWE-592","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-43512","date":"2026-10-08","epss":0.01326,"percentile":0.70119}],"urls":["https://lists.apache.org/thread/7x09x7o12solvclslw3sz0288xc8wx73","http://www.openwall.com/lists/oss-security/2026/05/12/8"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-43512","description":"DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from before 7.0.0.\nOlder unsupported versions any also be affect\n\nUsers are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue."}]},{"artifact":{"id":"513ca9d3d8c0b6c8","cpes":["cpe:2.3:a:aws-java-sdk-s3:aws-java-sdk-s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:aws-java-sdk-s3:aws_java_sdk_s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:aws_java_sdk_s3:aws-java-sdk-s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:aws_java_sdk_s3:aws_java_sdk_s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:com.amazonaws:aws-java-sdk-s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:com.amazonaws:aws_java_sdk_s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:aws-java-sdk:aws-java-sdk-s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:aws-java-sdk:aws_java_sdk_s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:aws_java_sdk:aws-java-sdk-s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:aws_java_sdk:aws_java_sdk_s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:amazonaws:aws-java-sdk-s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:amazonaws:aws_java_sdk_s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:aws-java:aws-java-sdk-s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:aws-java:aws_java_sdk_s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:aws_java:aws-java-sdk-s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:aws_java:aws_java_sdk_s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:aws:aws-java-sdk-s3:1.11.409:*:*:*:*:*:*:*","cpe:2.3:a:aws:aws_java_sdk_s3:1.11.409:*:*:*:*:*:*:*"],"name":"aws-java-sdk-s3","purl":"pkg:maven/com.amazonaws/aws-java-sdk-s3@1.11.409","type":"java-archive","version":"1.11.409","language":"java","licenses":[],"metadata":{"pomGroupID":"com.amazonaws","virtualPath":"/usr/lib/unifi/lib/aws-java-sdk-s3-1.11.409.jar","manifestName":"","pomArtifactID":"aws-java-sdk-s3","archiveDigests":[{"value":"d5e153ce4b8e2c6033a51c1ff38d7d9495a6f0c4","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/aws-java-sdk-s3-1.11.409.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/aws-java-sdk-s3-1.11.409.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.12.261"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-c28r-hw5m-5gv3","versionConstraint":"<1.12.261 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.amazonaws:aws-java-sdk-s3","version":"1.11.409"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-c28r-hw5m-5gv3","fix":{"state":"fixed","versions":["1.12.261"],"available":[{"date":"2022-07-16","kind":"first-observed","version":"1.12.261"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L","metrics":{"baseScore":7.9,"impactScore":6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-31159","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2022-31159","date":"2026-10-08","epss":0.01616,"percentile":0.75286}],"risk":1.24432,"urls":["https://github.com/aws/aws-sdk-java/security/advisories/GHSA-c28r-hw5m-5gv3","https://github.com/aws/aws-sdk-java/commit/cb66c50c885566d9a7fce837a68dc48ddced8a9a","https://nvd.nist.gov/vuln/detail/CVE-2022-31159"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-c28r-hw5m-5gv3","description":"Partial Path Traversal in com.amazonaws:aws-java-sdk-s3"},"relatedVulnerabilities":[{"id":"CVE-2022-31159","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L","metrics":{"baseScore":7.9,"impactScore":6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-31159","cwe":"CWE-22","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2022-31159","date":"2026-10-08","epss":0.01616,"percentile":0.75286}],"urls":["https://github.com/aws/aws-sdk-java/security/advisories/GHSA-c28r-hw5m-5gv3"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-31159","description":"The AWS SDK for Java enables Java developers to work with Amazon Web Services. A partial-path traversal issue exists within the `downloadDirectory` method in the AWS S3 TransferManager component of the AWS SDK for Java v1 prior to version 1.12.261. Applications using the SDK control the `destinationDirectory` argument, but S3 object keys are determined by the application that uploaded the objects. The `downloadDirectory` method allows the caller to pass a filesystem object in the object key but contained an issue in the validation logic for the key name. A knowledgeable actor could bypass the validation logic by including a UNIX double-dot in the bucket key. Under certain conditions, this could permit them to retrieve a directory from their S3 bucket that is one level up in the filesystem from their working directory. This issue’s scope is limited to directories whose name prefix matches the destinationDirectory. E.g. for destination directory`/tmp/foo`, the actor can cause a download to `/tmp/foo-bar`, but not `/tmp/bar`. If `com.amazonaws.services.s3.transfer.TransferManager::downloadDirectory` is used to download an untrusted buckets contents, the contents of that bucket can be written outside of the intended destination directory. Version 1.12.261 contains a patch for this issue. As a workaround, when calling `com.amazonaws.services.s3.transfer.TransferManager::downloadDirectory`, pass a `KeyFilter` that forbids `S3ObjectSummary` objects that `getKey` method return a string containing the substring `..` ."}]},{"artifact":{"id":"b7d0468c5cec5f79","cpes":["cpe:2.3:a:apache:commons-net:3.8.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_net:3.8.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:3.8.0:*:*:*:*:*:*:*"],"name":"commons-net","purl":"pkg:maven/commons-net/commons-net@3.8.0","type":"java-archive","version":"3.8.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"commons-net","virtualPath":"/usr/lib/unifi/lib/commons-net-3.8.0.jar","manifestName":"","pomArtifactID":"commons-net","archiveDigests":[{"value":"63ea56587c8aaf05adab5cb0397e056bac8a2db0","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/commons-net-3.8.0.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/commons-net-3.8.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.9.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cgp8-4m63-fhh5","versionConstraint":"<3.9.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"commons-net:commons-net","version":"3.8.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-cgp8-4m63-fhh5","fix":{"state":"fixed","versions":["3.9.0"],"available":[{"date":"2022-12-06","kind":"first-observed","version":"3.9.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-37533","cwe":"CWE-20","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2021-37533","date":"2026-10-08","epss":0.02129,"percentile":0.81382}],"risk":1.224175,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2021-37533","https://lists.apache.org/thread/o6yn9r9x6s94v97264hmgol1sf48mvx7","https://github.com/apache/commons-net/commit/4fe1bae56e53f32756b1ca3296f3dd2c45e3e060","https://issues.apache.org/jira/browse/NET-711","http://www.openwall.com/lists/oss-security/2022/12/03/1","https://lists.debian.org/debian-lts-announce/2022/12/msg00038.html","https://www.debian.org/security/2022/dsa-5307"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cgp8-4m63-fhh5","description":"Apache Commons Net vulnerable to information leakage via malicious server"},"relatedVulnerabilities":[{"id":"CVE-2021-37533","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-37533","cwe":"CWE-20","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2021-37533","date":"2026-10-08","epss":0.02129,"percentile":0.81382}],"urls":["http://www.openwall.com/lists/oss-security/2022/12/03/1","https://lists.apache.org/thread/o6yn9r9x6s94v97264hmgol1sf48mvx7","https://lists.debian.org/debian-lts-announce/2022/12/msg00038.html","https://www.debian.org/security/2022/dsa-5307"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-37533","description":"Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711."}]},{"artifact":{"id":"f6d59748713e2bd6","cpes":["cpe:2.3:a:libcups2:libcups2:2.3.1-9ubuntu1.6:*:*:*:*:*:*:*"],"name":"libcups2","purl":"pkg:deb/ubuntu/libcups2@2.3.1-9ubuntu1.6?arch=amd64&distro=ubuntu-20.04&upstream=cups","type":"deb","version":"2.3.1-9ubuntu1.6","language":"","licenses":["Apache-2.0","Apache-2.0-with-GPL2-LGPL2-Exception","BSD-3-clause","FSFUL","Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcups2/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libcups2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcups2:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libcups2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cups"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.3.1-9ubuntu1.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-35235","versionConstraint":"< 2.3.1-9ubuntu1.7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"cups","version":"2.3.1-9ubuntu1.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-35235","fix":{"state":"fixed","versions":["2.3.1-9ubuntu1.7"],"available":[{"date":"2024-06-24","kind":"advisory","version":"2.3.1-9ubuntu1.7"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-35235","cwe":"CWE-59","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-35235","cwe":"CWE-252","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-35235","date":"2026-10-08","epss":0.02421,"percentile":0.83683}],"risk":1.2105,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-35235"},"relatedVulnerabilities":[{"id":"CVE-2024-35235","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":6.7,"impactScore":5.9,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.4,"impactScore":3.6,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-35235","cwe":"CWE-59","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2024-35235","cwe":"CWE-252","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2024-35235","date":"2026-10-08","epss":0.02421,"percentile":0.83683}],"urls":["http://www.openwall.com/lists/oss-security/2024/06/11/1","http://www.openwall.com/lists/oss-security/2024/06/12/4","http://www.openwall.com/lists/oss-security/2024/06/12/5","https://git.launchpad.net/ubuntu/+source/apparmor/tree/profiles/apparmor.d/abstractions/user-tmp#n21","https://github.com/OpenPrinting/cups/blob/aba917003c8de55e5bf85010f0ecf1f1ddd1408e/cups/http-addr.c#L229-L240","https://github.com/OpenPrinting/cups/commit/ff1f8a623e090dee8a8aadf12a6a4b25efac143d","https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f","https://lists.debian.org/debian-lts-announce/2024/06/msg00001.html","http://www.openwall.com/lists/oss-security/2024/11/08/3","https://github.com/OpenPrinting/cups/releases/tag/v2.4.9"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-35235","description":"OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of the provided argument, providing world-writable access to the target. Given that cupsd is often running as root, this can result in the change of permission of any user or system files to be world writable. Given the aforementioned Ubuntu AppArmor context, on such systems this vulnerability is limited to those files modifiable by the cupsd process. In that specific case it was found to be possible to turn the configuration of the Listen argument into full control over the cupsd.conf and cups-files.conf configuration files. By later setting the User and Group arguments in cups-files.conf, and printing with a printer configured by PPD with a `FoomaticRIPCommandLine` argument, arbitrary user and group (not root) command execution could be achieved, which can further be used on Ubuntu systems to achieve full root command execution. Commit ff1f8a623e090dee8a8aadf12a6a4b25efac143d contains a patch for the issue."}]},{"artifact":{"id":"ecdba12e72372c34","cpes":["cpe:2.3:a:org.yaml.snakeyaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:snakeyaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:org.yaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:yaml:snakeyaml:1.30:*:*:*:*:*:*:*"],"name":"snakeyaml","purl":"pkg:maven/org.yaml/snakeyaml@1.30","type":"java-archive","version":"1.30","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.yaml","virtualPath":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","manifestName":"","pomArtifactID":"snakeyaml","archiveDigests":[{"value":"8fde7fe2586328ac3c68db92045e1c8759125000","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.31"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-c4r9-r8fh-9vj2","versionConstraint":"<1.31 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.yaml:snakeyaml","version":"1.30"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-c4r9-r8fh-9vj2","fix":{"state":"fixed","versions":["1.31"],"available":[{"date":"2022-09-16","kind":"first-observed","version":"1.31"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-38749","cwe":"CWE-121","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-38749","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-38749","date":"2026-10-08","epss":0.02061,"percentile":0.80751}],"risk":1.1850749999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-38749","https://bitbucket.org/snakeyaml/snakeyaml/issues/525/got-stackoverflowerror-for-many-open","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47024","https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html","https://security.gentoo.org/glsa/202305-28","https://arxiv.org/pdf/2306.05534.pdf","https://security.netapp.com/advisory/ntap-20240315-0010"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-c4r9-r8fh-9vj2","description":"snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write"},"relatedVulnerabilities":[{"id":"CVE-2022-38749","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-38749","cwe":"CWE-121","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-38749","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-38749","date":"2026-10-08","epss":0.02061,"percentile":0.80751}],"urls":["https://bitbucket.org/snakeyaml/snakeyaml/issues/525/got-stackoverflowerror-for-many-open","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47024","https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html","https://security.gentoo.org/glsa/202305-28","https://security.netapp.com/advisory/ntap-20240315-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-38749","description":"Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow."}]},{"artifact":{"id":"08554ff471544ae9","cpes":["cpe:2.3:a:com.google.oauth-client:google-oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.oauth-client:google_oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth-client:google-oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth-client:google_oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth_client:google-oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth_client:google_oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.oauth-client:oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.oauth-client:oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth-client:oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth-client:oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth:google-oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth:google_oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth:google-oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth:google_oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth_client:oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth_client:oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth-client:google-oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth-client:google_oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth_client:google-oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth_client:google_oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google:google-oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google:google_oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth:oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google-oauth:oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth:oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google_oauth:oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth-client:oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth-client:oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth:google-oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth:google_oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth_client:oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth_client:oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google:oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:google:oauth_client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth:oauth-client:1.26.0:*:*:*:*:*:*:*","cpe:2.3:a:oauth:oauth_client:1.26.0:*:*:*:*:*:*:*"],"name":"google-oauth-client","purl":"pkg:maven/com.google.oauth-client/google-oauth-client@1.26.0","type":"java-archive","version":"1.26.0","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.google.oauth-client","virtualPath":"/usr/lib/unifi/lib/google-oauth-client-1.26.0.jar","manifestName":"","pomArtifactID":"google-oauth-client","archiveDigests":[{"value":"a4efb7949a9176e2313a98ab5419173939c9ae1b","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/google-oauth-client-1.26.0.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/google-oauth-client-1.26.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.31.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-f263-c949-w85g","versionConstraint":"<1.31.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.google.oauth-client:google-oauth-client","version":"1.26.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-f263-c949-w85g","fix":{"state":"fixed","versions":["1.31.0"],"available":[{"date":"2021-09-29","kind":"first-observed","version":"1.31.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7692","cwe":"CWE-863","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7692","date":"2026-10-08","epss":0.01587,"percentile":0.7486}],"risk":1.182315,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2020-7692","https://github.com/googleapis/google-oauth-java-client/issues/469","https://github.com/googleapis/google-oauth-java-client/commit/13433cd7dd06267fc261f0b1d4764f8e3432c824","https://lists.apache.org/thread.html/r3db6ac73e0558d64f0b664f2fa4ef0a865e57c5de20f8321d3b48678@%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/reae8909b264d1103f321b9ce1623c10c1ddc77dba9790247f2c0c90f@%3Ccommits.druid.apache.org%3E","https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-575276","https://tools.ietf.org/html/rfc7636%23section-1","https://tools.ietf.org/html/rfc8252%23section-8.1"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-f263-c949-w85g","description":"Improper Authorization in Google OAuth Client"},"relatedVulnerabilities":[{"id":"CVE-2020-7692","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"report@snyk.io","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7692","cwe":"CWE-863","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7692","date":"2026-10-08","epss":0.01587,"percentile":0.7486}],"urls":["https://github.com/googleapis/google-oauth-java-client/commit/13433cd7dd06267fc261f0b1d4764f8e3432c824","https://github.com/googleapis/google-oauth-java-client/issues/469","https://lists.apache.org/thread.html/r3db6ac73e0558d64f0b664f2fa4ef0a865e57c5de20f8321d3b48678%40%3Ccommits.druid.apache.org%3E","https://lists.apache.org/thread.html/reae8909b264d1103f321b9ce1623c10c1ddc77dba9790247f2c0c90f%40%3Ccommits.druid.apache.org%3E","https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-575276","https://tools.ietf.org/html/rfc7636%23section-1","https://tools.ietf.org/html/rfc8252%23section-8.1"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7692","description":"PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the authorization code returned by an authorization server is not enough to guarantee that the client that issued the initial authorization request is the one that will be authorized. An attacker is able to obtain the authorization code using a malicious app on the client-side and use it to gain authorization to the protected resource. This affects the package com.google.oauth-client:google-oauth-client before 1.31.0."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.68"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-p22x-g9px-3945","versionConstraint":">=9.0.0-M1,<9.0.68 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-p22x-g9px-3945","fix":{"state":"fixed","versions":["9.0.68"],"available":[{"date":"2024-04-24","kind":"first-observed","version":"9.0.68"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-42252","cwe":"CWE-444","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2022-42252","cwe":"CWE-444","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-42252","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-42252","date":"2026-10-08","epss":0.01575,"percentile":0.74696}],"risk":1.18125,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-42252","https://lists.apache.org/thread/zzcxzvqfdqn515zfs3dxb7n8gty589sq","https://security.gentoo.org/glsa/202305-37","https://github.com/apache/tomcat/commit/0d089a15047faf9cb3c82f80f4d28febd4798920","https://github.com/apache/tomcat/commit/4c7f4fd09d2cc1692112ef70b8ee23a7a037ae77","https://github.com/apache/tomcat/commit/a1c07906d8dcaf7957e5cc97f5cdbac7d18a205a","https://github.com/apache/tomcat/commit/c9fe754e5d17e262dfbd3eab2a03ca96ff372dc3","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-8.html","https://tomcat.apache.org/security-9.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-p22x-g9px-3945","description":"Apache Tomcat may reject request containing invalid Content-Length header"},"relatedVulnerabilities":[{"id":"CVE-2022-42252","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-42252","cwe":"CWE-444","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2022-42252","cwe":"CWE-444","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2022-42252","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-42252","date":"2026-10-08","epss":0.01575,"percentile":0.74696}],"urls":["https://lists.apache.org/thread/zzcxzvqfdqn515zfs3dxb7n8gty589sq","https://security.gentoo.org/glsa/202305-37"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-42252","description":"If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rejectIllegalHeader to false (the default for 8.5.x only), Tomcat did not reject a request containing an invalid Content-Length header making a request smuggling attack possible if Tomcat was located behind a reverse proxy that also failed to reject the request with the invalid header."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.107"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4j3c-42xv-3f84","versionConstraint":">=9.0.0.M1,<9.0.107 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-4j3c-42xv-3f84","fix":{"state":"fixed","versions":["9.0.107"],"available":[{"date":"2026-07-01","kind":"first-observed","version":"9.0.107"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52434","cwe":"CWE-362","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-52434","date":"2026-10-08","epss":0.01983,"percentile":0.79937}],"risk":1.179885,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-52434","https://lists.apache.org/thread/gxgh65004f25y8519coth6w7vchww030","https://github.com/apache/tomcat/commit/8a83c3c42d20762782678932c14005cd3397a018","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html","http://www.openwall.com/lists/oss-security/2025/07/10/11"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4j3c-42xv-3f84","description":"Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector"},"relatedVulnerabilities":[{"id":"CVE-2025-52434","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52434","cwe":"CWE-362","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-52434","date":"2026-10-08","epss":0.01983,"percentile":0.79937}],"urls":["https://lists.apache.org/thread/gxgh65004f25y8519coth6w7vchww030","http://www.openwall.com/lists/oss-security/2025/07/10/11","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-52434","description":"Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections.\n\nThis issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106.\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions \nmay also be affected.\n\n\nUsers are recommended to upgrade to version 9.0.107, which fixes the issue."}]},{"artifact":{"id":"33bfbfa0d7f4ffac","cpes":["cpe:2.3:a:org.springframework:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-webmvc:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-webmvc:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_webmvc:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_webmvc:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_webmvc:5.3.22:*:*:*:*:*:*:*"],"name":"spring-webmvc","purl":"pkg:maven/org.springframework/spring-webmvc@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","manifestName":"","pomArtifactID":"spring-webmvc","archiveDigests":[{"value":"519d86b7ac9b8b6bb54739eb4eb73dc13a263b28","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-r936-gwx5-v52f","versionConstraint":">=5.3.0,<=5.3.43 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-webmvc","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-r936-gwx5-v52f","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-41242","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-41242","date":"2026-10-08","epss":0.02127,"percentile":0.81371}],"risk":1.159215,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-41242","http://spring.io/security/cve-2025-41242"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-r936-gwx5-v52f","description":"Spring Framework MVC Applications Path Traversal Vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2025-41242","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-41242","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-41242","date":"2026-10-08","epss":0.02127,"percentile":0.81371}],"urls":["http://spring.io/security/cve-2025-41242"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-41242","description":"Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container.\n\nAn application can be vulnerable when all the following are true:\n\n  *  the application is deployed as a WAR or with an embedded Servlet container\n  *  the Servlet container  does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization \n  *  the application  serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title  with Spring resource handling\n\n\nWe have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application."}]},{"artifact":{"id":"dab40c8de1201736","cpes":["cpe:2.3:a:bsdutils:bsdutils:1\\:2.34-0.1ubuntu9.4:*:*:*:*:*:*:*"],"name":"bsdutils","purl":"pkg:deb/ubuntu/bsdutils@1%3A2.34-0.1ubuntu9.4?arch=amd64&distro=ubuntu-20.04&upstream=util-linux%402.34-0.1ubuntu9.4","type":"deb","version":"1:2.34-0.1ubuntu9.4","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/bsdutils/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/bsdutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/bsdutils.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/bsdutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/bsdutils.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/bsdutils.list"}],"upstreams":[{"name":"util-linux","version":"2.34-0.1ubuntu9.4"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-0.1ubuntu9.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.34-0.1ubuntu9.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"util-linux","version":"2.34-0.1ubuntu9.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.34-0.1ubuntu9.6"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.34-0.1ubuntu9.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"2db2fefae5bf45a9","cpes":["cpe:2.3:a:fdisk:fdisk:2.34-0.1ubuntu9.4:*:*:*:*:*:*:*"],"name":"fdisk","purl":"pkg:deb/ubuntu/fdisk@2.34-0.1ubuntu9.4?arch=amd64&distro=ubuntu-20.04&upstream=util-linux","type":"deb","version":"2.34-0.1ubuntu9.4","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/fdisk/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/fdisk/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/fdisk.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/fdisk.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/fdisk.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/fdisk.list"}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-0.1ubuntu9.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.34-0.1ubuntu9.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"util-linux","version":"2.34-0.1ubuntu9.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.34-0.1ubuntu9.6"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.34-0.1ubuntu9.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"d21f0b91a5054e9e","cpes":["cpe:2.3:a:libblkid1:libblkid1:2.34-0.1ubuntu9.4:*:*:*:*:*:*:*"],"name":"libblkid1","purl":"pkg:deb/ubuntu/libblkid1@2.34-0.1ubuntu9.4?arch=amd64&distro=ubuntu-20.04&upstream=util-linux","type":"deb","version":"2.34-0.1ubuntu9.4","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libblkid1/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libblkid1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libblkid1:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libblkid1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-0.1ubuntu9.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.34-0.1ubuntu9.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"util-linux","version":"2.34-0.1ubuntu9.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.34-0.1ubuntu9.6"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.34-0.1ubuntu9.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"3a0fb67c96e7e1db","cpes":["cpe:2.3:a:libfdisk1:libfdisk1:2.34-0.1ubuntu9.4:*:*:*:*:*:*:*"],"name":"libfdisk1","purl":"pkg:deb/ubuntu/libfdisk1@2.34-0.1ubuntu9.4?arch=amd64&distro=ubuntu-20.04&upstream=util-linux","type":"deb","version":"2.34-0.1ubuntu9.4","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libfdisk1/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libfdisk1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libfdisk1:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libfdisk1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-0.1ubuntu9.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.34-0.1ubuntu9.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"util-linux","version":"2.34-0.1ubuntu9.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.34-0.1ubuntu9.6"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.34-0.1ubuntu9.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"ff1cc7d1a5bb326b","cpes":["cpe:2.3:a:libmount1:libmount1:2.34-0.1ubuntu9.4:*:*:*:*:*:*:*"],"name":"libmount1","purl":"pkg:deb/ubuntu/libmount1@2.34-0.1ubuntu9.4?arch=amd64&distro=ubuntu-20.04&upstream=util-linux","type":"deb","version":"2.34-0.1ubuntu9.4","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmount1/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libmount1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmount1:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libmount1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-0.1ubuntu9.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.34-0.1ubuntu9.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"util-linux","version":"2.34-0.1ubuntu9.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.34-0.1ubuntu9.6"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.34-0.1ubuntu9.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"8b063e379cd4ea9c","cpes":["cpe:2.3:a:libsmartcols1:libsmartcols1:2.34-0.1ubuntu9.4:*:*:*:*:*:*:*"],"name":"libsmartcols1","purl":"pkg:deb/ubuntu/libsmartcols1@2.34-0.1ubuntu9.4?arch=amd64&distro=ubuntu-20.04&upstream=util-linux","type":"deb","version":"2.34-0.1ubuntu9.4","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsmartcols1/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libsmartcols1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsmartcols1:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libsmartcols1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-0.1ubuntu9.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.34-0.1ubuntu9.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"util-linux","version":"2.34-0.1ubuntu9.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.34-0.1ubuntu9.6"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.34-0.1ubuntu9.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"65f61fb1840e8212","cpes":["cpe:2.3:a:libuuid1:libuuid1:2.34-0.1ubuntu9.4:*:*:*:*:*:*:*"],"name":"libuuid1","purl":"pkg:deb/ubuntu/libuuid1@2.34-0.1ubuntu9.4?arch=amd64&distro=ubuntu-20.04&upstream=util-linux","type":"deb","version":"2.34-0.1ubuntu9.4","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libuuid1/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libuuid1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libuuid1:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libuuid1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-0.1ubuntu9.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.34-0.1ubuntu9.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"util-linux","version":"2.34-0.1ubuntu9.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.34-0.1ubuntu9.6"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.34-0.1ubuntu9.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"d88b5d33f191e0f4","cpes":["cpe:2.3:a:mount:mount:2.34-0.1ubuntu9.4:*:*:*:*:*:*:*"],"name":"mount","purl":"pkg:deb/ubuntu/mount@2.34-0.1ubuntu9.4?arch=amd64&distro=ubuntu-20.04&upstream=util-linux","type":"deb","version":"2.34-0.1ubuntu9.4","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mount/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/mount/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mount.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/mount.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mount.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/mount.list"}],"upstreams":[{"name":"util-linux"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-0.1ubuntu9.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.34-0.1ubuntu9.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"util-linux","version":"2.34-0.1ubuntu9.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.34-0.1ubuntu9.6"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.34-0.1ubuntu9.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"44e98c0e356f2965","cpes":["cpe:2.3:a:util-linux:util-linux:2.34-0.1ubuntu9.4:*:*:*:*:*:*:*","cpe:2.3:a:util-linux:util_linux:2.34-0.1ubuntu9.4:*:*:*:*:*:*:*","cpe:2.3:a:util_linux:util-linux:2.34-0.1ubuntu9.4:*:*:*:*:*:*:*","cpe:2.3:a:util_linux:util_linux:2.34-0.1ubuntu9.4:*:*:*:*:*:*:*","cpe:2.3:a:util:util-linux:2.34-0.1ubuntu9.4:*:*:*:*:*:*:*","cpe:2.3:a:util:util_linux:2.34-0.1ubuntu9.4:*:*:*:*:*:*:*"],"name":"util-linux","purl":"pkg:deb/ubuntu/util-linux@2.34-0.1ubuntu9.4?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"2.34-0.1ubuntu9.4","language":"","licenses":["BSD-2-clause","BSD-3-clause","BSD-4-clause","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+","MIT","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/util-linux/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/util-linux/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/util-linux.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/util-linux.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/util-linux.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/util-linux.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/util-linux.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/util-linux.list"},{"path":"/var/lib/dpkg/info/util-linux.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/util-linux.postinst"},{"path":"/var/lib/dpkg/info/util-linux.postrm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/util-linux.postrm"},{"path":"/var/lib/dpkg/info/util-linux.preinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/util-linux.preinst"},{"path":"/var/lib/dpkg/info/util-linux.prerm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/util-linux.prerm"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-0.1ubuntu9.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-28085","versionConstraint":"< 2.34-0.1ubuntu9.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"util-linux","version":"2.34-0.1ubuntu9.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-28085","fix":{"state":"fixed","versions":["2.34-0.1ubuntu9.6"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2.34-0.1ubuntu9.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"risk":1.121,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28085"},"relatedVulnerabilities":[{"id":"CVE-2024-28085","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28085","cwe":"CWE-150","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28085","date":"2026-10-08","epss":0.02242,"percentile":0.82321}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/27/5","http://www.openwall.com/lists/oss-security/2024/03/27/6","http://www.openwall.com/lists/oss-security/2024/03/27/7","http://www.openwall.com/lists/oss-security/2024/03/27/8","http://www.openwall.com/lists/oss-security/2024/03/27/9","http://www.openwall.com/lists/oss-security/2024/03/28/1","http://www.openwall.com/lists/oss-security/2024/03/28/2","http://www.openwall.com/lists/oss-security/2024/03/28/3","https://github.com/skyler-ferrante/CVE-2024-28085","https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/","https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt","https://security.netapp.com/advisory/ntap-20240531-0003/","https://www.openwall.com/lists/oss-security/2024/03/27/5","http://seclists.org/fulldisclosure/2024/Mar/35","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://github.com/util-linux/util-linux/discussions/2868"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28085","description":"wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.81"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-g8pj-r55q-5c2v","versionConstraint":">=9.0.0-M1,<9.0.81 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-g8pj-r55q-5c2v","fix":{"state":"fixed","versions":["9.0.81"],"available":[{"date":"2023-12-22","kind":"first-observed","version":"9.0.81"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-42795","cwe":"CWE-459","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2023-42795","date":"2026-10-08","epss":0.0216,"percentile":0.81651}],"risk":1.1124,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-42795","https://lists.apache.org/thread/065jfyo583490r9j2v73nhpyxdob56lw","http://www.openwall.com/lists/oss-security/2023/10/10/9","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522","https://github.com/apache/tomcat/commit/30f8063d7a9b4c43ae4722f5e382a76af1d7a6bf","https://github.com/apache/tomcat/commit/44d05d75d696ca10ce251e4e370511e38f20ae75","https://github.com/apache/tomcat/commit/9375d67106f8df9eb9d7b360b2bef052fe67d3d4","https://github.com/apache/tomcat/commit/d6db22e411307c97ddf78315c15d5889356eca38","https://security.netapp.com/advisory/ntap-20231103-0007"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-g8pj-r55q-5c2v","description":"Apache Tomcat Incomplete Cleanup vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2023-42795","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-42795","cwe":"CWE-459","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2023-42795","date":"2026-10-08","epss":0.0216,"percentile":0.81651}],"urls":["https://lists.apache.org/thread/065jfyo583490r9j2v73nhpyxdob56lw","http://www.openwall.com/lists/oss-security/2023/10/10/9","https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html","https://security.netapp.com/advisory/ntap-20231103-0007/","https://www.debian.org/security/2023/dsa-5521","https://www.debian.org/security/2023/dsa-5522"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-42795","description":"Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could \ncause Tomcat to skip some parts of the recycling process leading to \ninformation leaking from the current request/response to the next.\nOlder, EOL versions may also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.0-M12 onwards, 10.1.14 onwards, 9.0.81 onwards or 8.5.94 onwards, which fixes the issue."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.118"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5m62-pw8w-7w9f","versionConstraint":"<9.0.118 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-5m62-pw8w-7w9f","fix":{"state":"fixed","versions":["9.0.118"],"available":[{"date":"2026-05-19","kind":"first-observed","version":"9.0.118"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-43515","cwe":"CWE-285","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-43515","date":"2026-10-08","epss":0.01221,"percentile":0.67807}],"risk":1.105005,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-43515","https://lists.apache.org/thread/746nxfxod0wsocxtmv8pb8nkgmwpc6bb","http://www.openwall.com/lists/oss-security/2026/05/12/11","https://github.com/apache/tomcat/commit/276087d9c7abbcecc6c4fb4e4b08cf64780c6e36","https://github.com/apache/tomcat/commit/c621317382682206fb58ab92ebd3e1b6fdd10ce9","https://github.com/apache/tomcat/commit/db919ff9912b4d61d1b702a1342b8bde39270031","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5m62-pw8w-7w9f","description":"Apache Tomcat - Security constraints not correctly applied"},"relatedVulnerabilities":[{"id":"CVE-2026-43515","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-43515","cwe":"CWE-285","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-43515","date":"2026-10-08","epss":0.01221,"percentile":0.67807}],"urls":["https://lists.apache.org/thread/746nxfxod0wsocxtmv8pb8nkgmwpc6bb","http://www.openwall.com/lists/oss-security/2026/05/12/11"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-43515","description":"Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109.\n\nUsers are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue."}]},{"artifact":{"id":"ecdba12e72372c34","cpes":["cpe:2.3:a:org.yaml.snakeyaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:snakeyaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:org.yaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:yaml:snakeyaml:1.30:*:*:*:*:*:*:*"],"name":"snakeyaml","purl":"pkg:maven/org.yaml/snakeyaml@1.30","type":"java-archive","version":"1.30","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.yaml","virtualPath":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","manifestName":"","pomArtifactID":"snakeyaml","archiveDigests":[{"value":"8fde7fe2586328ac3c68db92045e1c8759125000","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.31"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-98wm-3w3q-mw94","versionConstraint":"<1.31 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.yaml:snakeyaml","version":"1.30"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-98wm-3w3q-mw94","fix":{"state":"fixed","versions":["1.31"],"available":[{"date":"2022-09-18","kind":"first-observed","version":"1.31"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-38751","cwe":"CWE-121","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-38751","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-38751","date":"2026-10-08","epss":0.01905,"percentile":0.79103}],"risk":1.095375,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-38751","https://bitbucket.org/snakeyaml/snakeyaml/issues/530/stackoverflow-oss-fuzz-47039","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47039","https://bitbucket.org/snakeyaml/snakeyaml/src/master/src/test/java/org/yaml/snakeyaml/issues/issue530/Fuzzy47039Test.java","https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html","https://security.gentoo.org/glsa/202305-28","https://security.netapp.com/advisory/ntap-20240315-0010"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-98wm-3w3q-mw94","description":"snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write"},"relatedVulnerabilities":[{"id":"CVE-2022-38751","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-38751","cwe":"CWE-121","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-38751","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-38751","date":"2026-10-08","epss":0.01905,"percentile":0.79103}],"urls":["https://bitbucket.org/snakeyaml/snakeyaml/issues/530/stackoverflow-oss-fuzz-47039","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47039","https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html","https://security.gentoo.org/glsa/202305-28","https://security.netapp.com/advisory/ntap-20240315-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-38751","description":"Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow."}]},{"artifact":{"id":"1864a7652741d1d9","cpes":["cpe:2.3:a:org.sonatype.oss:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:org.json:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:sonatype:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:json:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:oss:json:20190722:*:*:*:*:*:*:*"],"name":"json","purl":"pkg:maven/org.json/json@20190722","type":"java-archive","version":"20190722","language":"java","licenses":["http://json.org/license.html"],"metadata":{"pomGroupID":"org.json","virtualPath":"/usr/lib/unifi/lib/json-20190722.jar","manifestName":"","pomArtifactID":"json","archiveDigests":[{"value":"07bce7bacf0ab5e9f894d307a3de8b7f540064d5","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/json-20190722.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/json-20190722.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"20231013"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4jq9-2xhw-jpx7","versionConstraint":"<=20230618 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.json:json","version":"20190722"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-4jq9-2xhw-jpx7","fix":{"state":"fixed","versions":["20231013"],"available":[{"date":"2023-11-15","kind":"first-observed","version":"20231013"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5072","date":"2026-10-08","epss":0.01449,"percentile":0.72543}],"risk":1.0867499999999999,"urls":["https://github.com/google/security-research/security/advisories/GHSA-4jq9-2xhw-jpx7","https://nvd.nist.gov/vuln/detail/CVE-2023-5072","https://github.com/stleary/JSON-java/issues/758","https://github.com/stleary/JSON-java/issues/771","https://github.com/stleary/JSON-java/pull/759","https://github.com/stleary/JSON-java/commit/60662e2f8384d3449822a3a1179bfe8de67b55bb"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4jq9-2xhw-jpx7","description":"Java: DoS Vulnerability in JSON-JAVA"},"relatedVulnerabilities":[{"id":"CVE-2023-5072","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2023-5072","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5072","date":"2026-10-08","epss":0.01449,"percentile":0.72543}],"urls":["http://www.openwall.com/lists/oss-security/2023/12/13/4","https://github.com/stleary/JSON-java/issues/758","https://github.com/stleary/JSON-java/issues/771","https://security.netapp.com/advisory/ntap-20240621-0007/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5072","description":"Denial of Service  in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used."}]},{"artifact":{"id":"baa937aa29029dca","cpes":["cpe:2.3:a:apache:commons-io:2.11.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_io:2.11.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons:2.11.0:*:*:*:*:*:*:*"],"name":"commons-io","purl":"pkg:maven/commons-io/commons-io@2.11.0","type":"java-archive","version":"2.11.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"commons-io","virtualPath":"/usr/lib/unifi/lib/commons-io-2.11.0.jar","manifestName":"","pomArtifactID":"commons-io","archiveDigests":[{"value":"a2503f302b11ebde7ebc3df41daebe0e4eea3689","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/commons-io-2.11.0.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/commons-io-2.11.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.14.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-78wr-2p64-hpwj","versionConstraint":">=2.0,<2.14.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"commons-io:commons-io","version":"2.11.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-78wr-2p64-hpwj","fix":{"state":"fixed","versions":["2.14.0"],"available":[{"date":"2024-10-04","kind":"first-observed","version":"2.14.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47554","cwe":"CWE-400","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-47554","date":"2026-10-08","epss":0.01315,"percentile":0.69883}],"risk":1.0257,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-47554","https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1","http://www.openwall.com/lists/oss-security/2024/10/03/2","https://security.netapp.com/advisory/ntap-20250131-0010"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-78wr-2p64-hpwj","description":"Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader"},"relatedVulnerabilities":[{"id":"CVE-2024-47554","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-47554","cwe":"CWE-400","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2024-47554","date":"2026-10-08","epss":0.01315,"percentile":0.69883}],"urls":["https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1","http://www.openwall.com/lists/oss-security/2024/10/03/2","https://security.netapp.com/advisory/ntap-20250131-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-47554","description":"Uncontrolled Resource Consumption vulnerability in Apache Commons IO.\n\nThe org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.\n\n\nThis issue affects Apache Commons IO: from 2.0 before 2.14.0.\n\nUsers are recommended to upgrade to version 2.14.0 or later, which fixes the issue."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-32040","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2021-32040","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-32040","cwe":"CWE-121","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-32040","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-32040","date":"2026-10-08","epss":0.02011,"percentile":0.8027}],"risk":1.0055,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-32040"},"relatedVulnerabilities":[{"id":"CVE-2021-32040","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-32040","cwe":"CWE-121","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-32040","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-32040","date":"2026-10-08","epss":0.02011,"percentile":0.8027}],"urls":["https://jira.mongodb.org/browse/SERVER-58203","https://jira.mongodb.org/browse/SERVER-59299","https://jira.mongodb.org/browse/SERVER-60218","https://security.netapp.com/advisory/ntap-20220609-0005/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-32040","description":"It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16.\n\nWorkaround: >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-32040","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2021-32040","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-32040","cwe":"CWE-121","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-32040","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-32040","date":"2026-10-08","epss":0.02011,"percentile":0.8027}],"risk":1.0055,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-32040"},"relatedVulnerabilities":[{"id":"CVE-2021-32040","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-32040","cwe":"CWE-121","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-32040","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-32040","date":"2026-10-08","epss":0.02011,"percentile":0.8027}],"urls":["https://jira.mongodb.org/browse/SERVER-58203","https://jira.mongodb.org/browse/SERVER-59299","https://jira.mongodb.org/browse/SERVER-60218","https://security.netapp.com/advisory/ntap-20220609-0005/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-32040","description":"It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16.\n\nWorkaround: >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-32040","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2021-32040","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-32040","cwe":"CWE-121","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-32040","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-32040","date":"2026-10-08","epss":0.02011,"percentile":0.8027}],"risk":1.0055,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-32040"},"relatedVulnerabilities":[{"id":"CVE-2021-32040","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-32040","cwe":"CWE-121","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-32040","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-32040","date":"2026-10-08","epss":0.02011,"percentile":0.8027}],"urls":["https://jira.mongodb.org/browse/SERVER-58203","https://jira.mongodb.org/browse/SERVER-59299","https://jira.mongodb.org/browse/SERVER-60218","https://security.netapp.com/advisory/ntap-20220609-0005/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-32040","description":"It may be possible to have an extremely long aggregation pipeline in conjunction with a specific stage/operator and cause a stack overflow due to the size of the stack frames used by that stage. If an attacker could cause such an aggregation to occur, they could maliciously crash MongoDB in a DoS attack. This vulnerability affects MongoDB Server v4.4 versions prior to and including 4.4.28, MongoDB Server v5.0 versions prior to 5.0.4 and MongoDB Server v4.2 versions prior to 4.2.16.\n\nWorkaround: >= v4.2.16 users and all v4.4 users can add the --setParameter internalPipelineLengthLimit=50 instead of the default 1000 to mongod at startup to prevent a crash."}]},{"artifact":{"id":"cbeb1ac80586032b","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.9-1ubuntu0.6:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.2.9-1ubuntu0.6?arch=amd64&distro=ubuntu-20.04&upstream=expat","type":"deb","version":"2.2.9-1ubuntu0.6","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28757","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"expat","version":"2.2.9-1ubuntu0.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-28757","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2024-28757","cwe":"CWE-776","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-28757","cwe":"CWE-776","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28757","date":"2026-10-08","epss":0.02006,"percentile":0.8022}],"risk":1.0030000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28757"},"relatedVulnerabilities":[{"id":"CVE-2024-28757","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28757","cwe":"CWE-776","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-28757","cwe":"CWE-776","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-28757","date":"2026-10-08","epss":0.02006,"percentile":0.8022}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/15/1","https://github.com/libexpat/libexpat/issues/839","https://github.com/libexpat/libexpat/pull/842","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE/","https://security.netapp.com/advisory/ntap-20240322-0001/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28757","description":"libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate)."}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010022","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010022","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-10-08","epss":0.03249,"percentile":0.8796}],"risk":0.9746999999999999,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010022"},"relatedVulnerabilities":[{"id":"CVE-2019-1010022","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-10-08","epss":0.03249,"percentile":0.8796}],"urls":["https://security-tracker.debian.org/tracker/CVE-2019-1010022","https://sourceware.org/bugzilla/show_bug.cgi?id=22850","https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3","https://ubuntu.com/security/CVE-2019-1010022"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010022","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010022","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010022","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-10-08","epss":0.03249,"percentile":0.8796}],"risk":0.9746999999999999,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010022"},"relatedVulnerabilities":[{"id":"CVE-2019-1010022","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-10-08","epss":0.03249,"percentile":0.8796}],"urls":["https://security-tracker.debian.org/tracker/CVE-2019-1010022","https://sourceware.org/bugzilla/show_bug.cgi?id=22850","https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3","https://ubuntu.com/security/CVE-2019-1010022"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010022","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"b082b70df3e54e06","cpes":["cpe:2.3:a:locales:locales:2.31-0ubuntu9.14:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.31-0ubuntu9.14?arch=all&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.14","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010022","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.14"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010022","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-10-08","epss":0.03249,"percentile":0.8796}],"risk":0.9746999999999999,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010022"},"relatedVulnerabilities":[{"id":"CVE-2019-1010022","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-10-08","epss":0.03249,"percentile":0.8796}],"urls":["https://security-tracker.debian.org/tracker/CVE-2019-1010022","https://sourceware.org/bugzilla/show_bug.cgi?id=22850","https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3","https://ubuntu.com/security/CVE-2019-1010022"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010022","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010024","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010024","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-10-08","epss":0.03193,"percentile":0.87729}],"risk":0.9578999999999999,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010024"},"relatedVulnerabilities":[{"id":"CVE-2019-1010024","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-10-08","epss":0.03193,"percentile":0.87729}],"urls":["http://www.securityfocus.com/bid/109162","https://security-tracker.debian.org/tracker/CVE-2019-1010024","https://sourceware.org/bugzilla/show_bug.cgi?id=22852","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010024"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010024","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010024","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010024","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-10-08","epss":0.03193,"percentile":0.87729}],"risk":0.9578999999999999,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010024"},"relatedVulnerabilities":[{"id":"CVE-2019-1010024","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-10-08","epss":0.03193,"percentile":0.87729}],"urls":["http://www.securityfocus.com/bid/109162","https://security-tracker.debian.org/tracker/CVE-2019-1010024","https://sourceware.org/bugzilla/show_bug.cgi?id=22852","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010024"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010024","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"b082b70df3e54e06","cpes":["cpe:2.3:a:locales:locales:2.31-0ubuntu9.14:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.31-0ubuntu9.14?arch=all&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.14","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010024","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.14"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010024","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-10-08","epss":0.03193,"percentile":0.87729}],"risk":0.9578999999999999,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010024"},"relatedVulnerabilities":[{"id":"CVE-2019-1010024","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-10-08","epss":0.03193,"percentile":0.87729}],"urls":["http://www.securityfocus.com/bid/109162","https://security-tracker.debian.org/tracker/CVE-2019-1010024","https://sourceware.org/bugzilla/show_bug.cgi?id=22852","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010024"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010024","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"e17b266d1d27c88b","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3","type":"java-archive","version":"2.13.3","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"56deb9ea2c93a7a556b3afbedd616d342963464e","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.18.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rmj7-2vxq-3g9f","versionConstraint":">=2.10.0,<2.18.8 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.13.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-rmj7-2vxq-3g9f","fix":{"state":"fixed","versions":["2.18.8"],"available":[{"date":"2026-06-24","kind":"first-observed","version":"2.18.8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-54513","date":"2026-10-08","epss":0.01226,"percentile":0.67932}],"risk":0.95628,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f","https://github.com/FasterXML/jackson-databind/issues/5981","https://github.com/FasterXML/jackson-databind/issues/5983","https://github.com/FasterXML/jackson-databind/pull/5984","https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5","https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e","https://nvd.nist.gov/vuln/detail/CVE-2026-54513","https://access.redhat.com/errata/RHSA-2026:36839","https://access.redhat.com/errata/RHSA-2026:40895","https://access.redhat.com/security/cve/CVE-2026-54513","https://bugzilla.redhat.com/show_bug.cgi?id=2492010","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json","https://access.redhat.com/errata/RHSA-2026:41951","https://access.redhat.com/errata/RHSA-2026:43218","https://access.redhat.com/errata/RHSA-2026:44271","https://access.redhat.com/errata/RHSA-2026:44066","https://access.redhat.com/errata/RHSA-2026:44065","https://access.redhat.com/errata/RHSA-2026:44064","https://access.redhat.com/errata/RHSA-2026:44063","https://access.redhat.com/errata/RHSA-2026:44062","https://access.redhat.com/errata/RHSA-2026:44061","https://access.redhat.com/errata/RHSA-2026:43400","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:48095","https://access.redhat.com/errata/RHSA-2026:50849","https://access.redhat.com/errata/RHSA-2026:50848","https://access.redhat.com/errata/RHSA-2026:50847","https://access.redhat.com/errata/RHSA-2026:50846","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:54622","https://access.redhat.com/errata/RHSA-2026:62260","https://access.redhat.com/errata/RHSA-2026:66488","https://access.redhat.com/errata/RHSA-2026:66545"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rmj7-2vxq-3g9f","description":"jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)"},"relatedVulnerabilities":[{"id":"CVE-2026-54513","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54513","cwe":"CWE-184","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-54513","date":"2026-10-08","epss":0.01226,"percentile":0.67932}],"urls":["https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5","https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e","https://github.com/FasterXML/jackson-databind/issues/5981","https://github.com/FasterXML/jackson-databind/issues/5983","https://github.com/FasterXML/jackson-databind/pull/5984","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f","https://access.redhat.com/errata/RHSA-2026:36839","https://access.redhat.com/errata/RHSA-2026:40895","https://access.redhat.com/errata/RHSA-2026:41951","https://access.redhat.com/errata/RHSA-2026:43218","https://access.redhat.com/errata/RHSA-2026:43400","https://access.redhat.com/errata/RHSA-2026:44061","https://access.redhat.com/errata/RHSA-2026:44062","https://access.redhat.com/errata/RHSA-2026:44063","https://access.redhat.com/errata/RHSA-2026:44064","https://access.redhat.com/errata/RHSA-2026:44065","https://access.redhat.com/errata/RHSA-2026:44066","https://access.redhat.com/errata/RHSA-2026:44271","https://access.redhat.com/errata/RHSA-2026:48095","https://access.redhat.com/errata/RHSA-2026:48151","https://access.redhat.com/errata/RHSA-2026:50846","https://access.redhat.com/errata/RHSA-2026:50847","https://access.redhat.com/errata/RHSA-2026:50848","https://access.redhat.com/errata/RHSA-2026:50849","https://access.redhat.com/errata/RHSA-2026:54435","https://access.redhat.com/errata/RHSA-2026:54622","https://access.redhat.com/errata/RHSA-2026:62260","https://access.redhat.com/errata/RHSA-2026:66488","https://access.redhat.com/errata/RHSA-2026:66545","https://access.redhat.com/security/cve/CVE-2026-54513","https://bugzilla.redhat.com/show_bug.cgi?id=2492010","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54513","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() allowlists any array type based only on clazz.isArray(), without validating the array's component (element) type against the configured allowlist. A PTV built with allowIfSubTypeIsArray() plus an explicit concrete-type allowlist therefore still permits EvilType[] even though EvilType is not allowlisted. When Jackson deserializes the elements and no per-element type IDs are present, it instantiates the component type directly with no further PTV check, bypassing the allowlist. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1f-1ubuntu2.21"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-0727","versionConstraint":"< 1.1.1f-1ubuntu2.21 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-0727","fix":{"state":"fixed","versions":["1.1.1f-1ubuntu2.21"],"available":[{"date":"2024-02-05","kind":"advisory","version":"1.1.1f-1ubuntu2.21"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-08","epss":0.03187,"percentile":0.877}],"risk":0.9561,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-0727"},"relatedVulnerabilities":[{"id":"CVE-2024-0727","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-08","epss":0.03187,"percentile":0.877}],"urls":["https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2","https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a","https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c","https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8","https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539","https://www.openssl.org/news/secadv/20240125.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240208-0006/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0727","description":"Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1f-1ubuntu2.21"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-0727","versionConstraint":"< 1.1.1f-1ubuntu2.21 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-0727","fix":{"state":"fixed","versions":["1.1.1f-1ubuntu2.21"],"available":[{"date":"2024-02-05","kind":"advisory","version":"1.1.1f-1ubuntu2.21"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-08","epss":0.03187,"percentile":0.877}],"risk":0.9561,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-0727"},"relatedVulnerabilities":[{"id":"CVE-2024-0727","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-0727","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-0727","date":"2026-10-08","epss":0.03187,"percentile":0.877}],"urls":["https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2","https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a","https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c","https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8","https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539","https://www.openssl.org/news/secadv/20240125.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240208-0006/","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0727","description":"Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"c1afe861706c7168","cpes":["cpe:2.3:a:krb5-locales:krb5-locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5-locales:krb5_locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5_locales:krb5-locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5_locales:krb5_locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"krb5-locales","purl":"pkg:deb/ubuntu/krb5-locales@1.17-6ubuntu4.4?arch=all&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/krb5-locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/krb5-locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/krb5-locales.list"}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37371","versionConstraint":"< 1.17-6ubuntu4.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-37371","fix":{"state":"fixed","versions":["1.17-6ubuntu4.6"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.17-6ubuntu4.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"risk":0.9315,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37371"},"relatedVulnerabilities":[{"id":"CVE-2024-37371","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0009/","https://security.netapp.com/advisory/ntap-20250124-0010/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."}]},{"artifact":{"id":"b88197ff1a531432","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37371","versionConstraint":"< 1.17-6ubuntu4.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-37371","fix":{"state":"fixed","versions":["1.17-6ubuntu4.6"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.17-6ubuntu4.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"risk":0.9315,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37371"},"relatedVulnerabilities":[{"id":"CVE-2024-37371","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0009/","https://security.netapp.com/advisory/ntap-20250124-0010/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."}]},{"artifact":{"id":"205c4946e1a25685","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37371","versionConstraint":"< 1.17-6ubuntu4.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-37371","fix":{"state":"fixed","versions":["1.17-6ubuntu4.6"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.17-6ubuntu4.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"risk":0.9315,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37371"},"relatedVulnerabilities":[{"id":"CVE-2024-37371","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0009/","https://security.netapp.com/advisory/ntap-20250124-0010/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."}]},{"artifact":{"id":"6a71efc1099a31f1","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37371","versionConstraint":"< 1.17-6ubuntu4.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-37371","fix":{"state":"fixed","versions":["1.17-6ubuntu4.6"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.17-6ubuntu4.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"risk":0.9315,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37371"},"relatedVulnerabilities":[{"id":"CVE-2024-37371","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0009/","https://security.netapp.com/advisory/ntap-20250124-0010/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."}]},{"artifact":{"id":"08cd2db1dbbc7a60","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37371","versionConstraint":"< 1.17-6ubuntu4.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-37371","fix":{"state":"fixed","versions":["1.17-6ubuntu4.6"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.17-6ubuntu4.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"risk":0.9315,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37371"},"relatedVulnerabilities":[{"id":"CVE-2024-37371","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37371","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-37371","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37371","date":"2026-10-08","epss":0.01863,"percentile":0.78627}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0009/","https://security.netapp.com/advisory/ntap-20250124-0010/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37371","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields."}]},{"artifact":{"id":"13bfa0f4f9d8aee0","cpes":["cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:snappy:1.1.8.4:*:*:*:*:*:*:*"],"name":"snappy-java","purl":"pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4","type":"java-archive","version":"1.1.8.4","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.xerial.snappy","virtualPath":"/usr/lib/unifi/lib/snappy-java-1.1.8.4.jar","manifestName":"","pomArtifactID":"snappy-java","archiveDigests":[{"value":"66f0d56454509f6e36175f2331572e250e04a6cc","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/snappy-java-1.1.8.4.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/snappy-java-1.1.8.4.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.1.10.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-pqr6-cmr2-h8hf","versionConstraint":"<=1.1.10.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.xerial.snappy:snappy-java","version":"1.1.8.4"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-pqr6-cmr2-h8hf","fix":{"state":"fixed","versions":["1.1.10.1"],"available":[{"date":"2023-06-16","kind":"first-observed","version":"1.1.10.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34453","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-34453","date":"2026-10-08","epss":0.01707,"percentile":0.76613}],"risk":0.930315,"urls":["https://github.com/xerial/snappy-java/security/advisories/GHSA-pqr6-cmr2-h8hf","https://github.com/xerial/snappy-java/commit/820e2e074c58748b41dbd547f4edba9e108ad905","https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/BitShuffle.java#L107","https://github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/BitShuffle.java","https://nvd.nist.gov/vuln/detail/CVE-2023-34453"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-pqr6-cmr2-h8hf","description":"snappy-java's Integer Overflow vulnerability in shuffle leads to DoS"},"relatedVulnerabilities":[{"id":"CVE-2023-34453","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34453","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-34453","date":"2026-10-08","epss":0.01707,"percentile":0.76613}],"urls":["https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/BitShuffle.java#L107","https://github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/BitShuffle.java","https://github.com/xerial/snappy-java/commit/820e2e074c58748b41dbd547f4edba9e108ad905","https://github.com/xerial/snappy-java/security/advisories/GHSA-pqr6-cmr2-h8hf"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34453","description":"snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing a fatal error.\n\nThe function `shuffle(int[] input)` in the file `BitShuffle.java` receives an array of integers and applies a bit shuffle on it. It does so by multiplying the length by 4 and passing it to the natively compiled shuffle function. Since the length is not tested, the multiplication by four can cause an integer overflow and become a smaller value than the true size, or even zero or negative. In the case of a negative value, a `java.lang.NegativeArraySizeException` exception will raise, which can crash the program. In a case of a value that is zero or too small, the code that afterwards references the shuffled array will assume a bigger size of the array, which might cause exceptions such as `java.lang.ArrayIndexOutOfBoundsException`.\n\nThe same issue exists also when using the `shuffle` functions that receive a double, float, long and short, each using a different multiplier that may cause the same issue.\n\nVersion 1.1.10.1 contains a patch for this vulnerability."}]},{"artifact":{"id":"115f8756a931640f","cpes":["cpe:2.3:a:org.springframework:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_web:5.3.22:*:*:*:*:*:*:*"],"name":"spring-web","purl":"pkg:maven/org.springframework/spring-web@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","manifestName":"","pomArtifactID":"spring-web","archiveDigests":[{"value":"fdab9b8d8df2e6a8fb90f2481c361bcf2c129567","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"5.3.34"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2wrp-6fg6-hmc5","versionConstraint":"<5.3.34 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-web","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-2wrp-6fg6-hmc5","fix":{"state":"fixed","versions":["5.3.34"],"available":[{"date":"2024-04-26","kind":"first-observed","version":"5.3.34"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22262","cwe":"CWE-601","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2024-22262","cwe":"CWE-918","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22262","date":"2026-10-08","epss":0.01191,"percentile":0.67043}],"risk":0.9289800000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-22262","https://spring.io/security/cve-2024-22262","https://github.com/spring-projects/spring-framework/blob/main/spring-web/src/main/java/org/springframework/web/util/UriComponentsBuilder.java","https://security.netapp.com/advisory/ntap-20240524-0003"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2wrp-6fg6-hmc5","description":"Spring Framework URL Parsing with Host Validation"},"relatedVulnerabilities":[{"id":"CVE-2024-22262","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-22262","cwe":"CWE-601","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2024-22262","cwe":"CWE-918","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-22262","date":"2026-10-08","epss":0.01191,"percentile":0.67043}],"urls":["https://security.netapp.com/advisory/ntap-20240524-0003/","https://spring.io/security/cve-2024-22262"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-22262","description":"Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html  attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22259 https://spring.io/security/cve-2024-22259  and  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input."}]},{"artifact":{"id":"0ecb0928f40bd774","cpes":["cpe:2.3:a:libssh-4:libssh-4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh-4:libssh_4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh_4:libssh-4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh_4:libssh_4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh-4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh_4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*"],"name":"libssh-4","purl":"pkg:deb/ubuntu/libssh-4@0.9.3-2ubuntu2.4?arch=amd64&distro=ubuntu-20.04&upstream=libssh","type":"deb","version":"0.9.3-2ubuntu2.4","language":"","licenses":["BSD-2-clause","BSD-3-clause","LGPL-2.1","LGPL-2.1+~OpenSSL","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssh-4/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssh-4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssh-4:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssh-4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-5318","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"libssh","version":"0.9.3-2ubuntu2.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-5318","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-5318","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-5318","date":"2026-10-08","epss":0.01841,"percentile":0.78346}],"risk":0.9205,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-5318"},"relatedVulnerabilities":[{"id":"CVE-2025-5318","cvss":[{"type":"Secondary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-5318","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-5318","date":"2026-10-08","epss":0.01841,"percentile":0.78346}],"urls":["https://access.redhat.com/errata/RHSA-2025:18231","https://access.redhat.com/errata/RHSA-2025:18275","https://access.redhat.com/errata/RHSA-2025:18286","https://access.redhat.com/errata/RHSA-2025:19012","https://access.redhat.com/errata/RHSA-2025:19098","https://access.redhat.com/errata/RHSA-2025:19101","https://access.redhat.com/errata/RHSA-2025:19295","https://access.redhat.com/errata/RHSA-2025:19300","https://access.redhat.com/errata/RHSA-2025:19313","https://access.redhat.com/errata/RHSA-2025:19400","https://access.redhat.com/errata/RHSA-2025:19401","https://access.redhat.com/errata/RHSA-2025:19470","https://access.redhat.com/errata/RHSA-2025:19472","https://access.redhat.com/errata/RHSA-2025:19807","https://access.redhat.com/errata/RHSA-2025:19864","https://access.redhat.com/errata/RHSA-2025:20943","https://access.redhat.com/errata/RHSA-2025:21013","https://access.redhat.com/errata/RHSA-2025:21329","https://access.redhat.com/errata/RHSA-2025:21829","https://access.redhat.com/errata/RHSA-2025:22275","https://access.redhat.com/errata/RHSA-2025:23078","https://access.redhat.com/errata/RHSA-2025:23079","https://access.redhat.com/errata/RHSA-2025:23080","https://access.redhat.com/errata/RHSA-2026:0326","https://access.redhat.com/errata/RHSA-2026:1541","https://access.redhat.com/errata/RHSA-2026:3461","https://access.redhat.com/errata/RHSA-2026:3462","https://access.redhat.com/security/cve/CVE-2025-5318","https://bugzilla.redhat.com/show_bug.cgi?id=2369131","https://www.libssh.org/security/advisories/CVE-2025-5318.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-5318","description":"A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior."}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010023","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010023","fix":{"state":"wont-fix","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2019-1010023","date":"2026-10-08","epss":0.03044,"percentile":0.87139}],"risk":0.9131999999999999,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010023"},"relatedVulnerabilities":[{"id":"CVE-2019-1010023","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-1010023","date":"2026-10-08","epss":0.03044,"percentile":0.87139}],"urls":["http://www.securityfocus.com/bid/109167","https://security-tracker.debian.org/tracker/CVE-2019-1010023","https://sourceware.org/bugzilla/show_bug.cgi?id=22851","https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010023"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010023","description":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010023","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010023","fix":{"state":"wont-fix","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2019-1010023","date":"2026-10-08","epss":0.03044,"percentile":0.87139}],"risk":0.9131999999999999,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010023"},"relatedVulnerabilities":[{"id":"CVE-2019-1010023","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-1010023","date":"2026-10-08","epss":0.03044,"percentile":0.87139}],"urls":["http://www.securityfocus.com/bid/109167","https://security-tracker.debian.org/tracker/CVE-2019-1010023","https://sourceware.org/bugzilla/show_bug.cgi?id=22851","https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010023"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010023","description":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"b082b70df3e54e06","cpes":["cpe:2.3:a:locales:locales:2.31-0ubuntu9.14:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.31-0ubuntu9.14?arch=all&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.14","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010023","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.14"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010023","fix":{"state":"wont-fix","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2019-1010023","date":"2026-10-08","epss":0.03044,"percentile":0.87139}],"risk":0.9131999999999999,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010023"},"relatedVulnerabilities":[{"id":"CVE-2019-1010023","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-1010023","date":"2026-10-08","epss":0.03044,"percentile":0.87139}],"urls":["http://www.securityfocus.com/bid/109167","https://security-tracker.debian.org/tracker/CVE-2019-1010023","https://sourceware.org/bugzilla/show_bug.cgi?id=22851","https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010023"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010023","description":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"1864a7652741d1d9","cpes":["cpe:2.3:a:org.sonatype.oss:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:org.json:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:sonatype:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:json:json:20190722:*:*:*:*:*:*:*","cpe:2.3:a:oss:json:20190722:*:*:*:*:*:*:*"],"name":"json","purl":"pkg:maven/org.json/json@20190722","type":"java-archive","version":"20190722","language":"java","licenses":["http://json.org/license.html"],"metadata":{"pomGroupID":"org.json","virtualPath":"/usr/lib/unifi/lib/json-20190722.jar","manifestName":"","pomArtifactID":"json","archiveDigests":[{"value":"07bce7bacf0ab5e9f894d307a3de8b7f540064d5","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/json-20190722.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/json-20190722.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"20230227"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3vqj-43w4-2q58","versionConstraint":"<20230227 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.json:json","version":"20190722"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-3vqj-43w4-2q58","fix":{"state":"fixed","versions":["20230227"],"available":[{"date":"2023-04-15","kind":"first-observed","version":"20230227"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45688","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-45688","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-45688","date":"2026-10-08","epss":0.01215,"percentile":0.67657}],"risk":0.9112499999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-45688","https://github.com/dromara/hutool/issues/2748","https://github.com/stleary/JSON-java/issues/708","https://github.com/stleary/JSON-java/commit/a6e412bded7a0ad605adfeca029318f184c32102","https://github.com/dromara/hutool/commit/6a2b585de0a380e8c12016dbaa1620b69be11b8c","https://github.com/dromara/hutool/releases/tag/5.8.25"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3vqj-43w4-2q58","description":"json stack overflow vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2022-45688","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45688","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-45688","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-45688","date":"2026-10-08","epss":0.01215,"percentile":0.67657}],"urls":["https://github.com/dromara/hutool/issues/2748","https://github.com/stleary/JSON-java/issues/708"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-45688","description":"A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data."}]},{"artifact":{"id":"13bfa0f4f9d8aee0","cpes":["cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:snappy:1.1.8.4:*:*:*:*:*:*:*"],"name":"snappy-java","purl":"pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4","type":"java-archive","version":"1.1.8.4","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.xerial.snappy","virtualPath":"/usr/lib/unifi/lib/snappy-java-1.1.8.4.jar","manifestName":"","pomArtifactID":"snappy-java","archiveDigests":[{"value":"66f0d56454509f6e36175f2331572e250e04a6cc","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/snappy-java-1.1.8.4.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/snappy-java-1.1.8.4.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.1.10.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-55g7-9cwv-5qfv","versionConstraint":"<=1.1.10.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.xerial.snappy:snappy-java","version":"1.1.8.4"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-55g7-9cwv-5qfv","fix":{"state":"fixed","versions":["1.1.10.4"],"available":[{"date":"2023-09-26","kind":"first-observed","version":"1.1.10.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-43642","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-43642","date":"2026-10-08","epss":0.01211,"percentile":0.67554}],"risk":0.90825,"urls":["https://github.com/xerial/snappy-java/security/advisories/GHSA-55g7-9cwv-5qfv","https://github.com/xerial/snappy-java/commit/9f8c3cf74223ed0a8a834134be9c917b9f10ceb5","https://github.com/xerial/snappy-java/releases/tag/v1.1.10.4","https://nvd.nist.gov/vuln/detail/CVE-2023-43642"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-55g7-9cwv-5qfv","description":"snappy-java's missing upper bound check on chunk length can lead to Denial of Service (DoS) impact"},"relatedVulnerabilities":[{"id":"CVE-2023-43642","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-43642","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-43642","date":"2026-10-08","epss":0.01211,"percentile":0.67554}],"urls":["https://github.com/xerial/snappy-java/commit/9f8c3cf74223ed0a8a834134be9c917b9f10ceb5","https://github.com/xerial/snappy-java/security/advisories/GHSA-55g7-9cwv-5qfv"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-43642","description":"snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service (DoS) attacks when decompressing data with a too large chunk size. Due to missing upper bound check on chunk length, an unrecoverable fatal error can occur. All versions of snappy-java including the latest released version 1.1.10.3 are vulnerable to this issue. A fix has been introduced in commit `9f8c3cf74` which will be included in the 1.1.10.4 release. Users are advised to upgrade. Users unable to upgrade should only accept compressed data from trusted sources."}]},{"artifact":{"id":"cbeb1ac80586032b","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.9-1ubuntu0.6:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.2.9-1ubuntu0.6?arch=amd64&distro=ubuntu-20.04&upstream=expat","type":"deb","version":"2.2.9-1ubuntu0.6","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-52425","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"expat","version":"2.2.9-1ubuntu0.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-52425","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-52425","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-52425","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-52425","date":"2026-10-08","epss":0.01815,"percentile":0.7802}],"risk":0.9075,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-52425"},"relatedVulnerabilities":[{"id":"CVE-2023-52425","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-52425","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-52425","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-52425","date":"2026-10-08","epss":0.01815,"percentile":0.7802}],"urls":["http://www.openwall.com/lists/oss-security/2024/03/20/5","https://github.com/libexpat/libexpat/pull/789","https://lists.debian.org/debian-lts-announce/2024/04/msg00006.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNUBSGZFEZOBHJFTAD42SAN4ATW2VEMV/","https://security.netapp.com/advisory/ntap-20240614-0003/","https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNRIHC7DVVRAIWFRGV23Y6UZXFBXSQDB/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-52425","description":"libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed."}]},{"artifact":{"id":"ecdba12e72372c34","cpes":["cpe:2.3:a:org.yaml.snakeyaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:snakeyaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:org.yaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:yaml:snakeyaml:1.30:*:*:*:*:*:*:*"],"name":"snakeyaml","purl":"pkg:maven/org.yaml/snakeyaml@1.30","type":"java-archive","version":"1.30","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.yaml","virtualPath":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","manifestName":"","pomArtifactID":"snakeyaml","archiveDigests":[{"value":"8fde7fe2586328ac3c68db92045e1c8759125000","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.32"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-w37g-rhq8-7m4j","versionConstraint":"<1.32 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.yaml:snakeyaml","version":"1.30"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-w37g-rhq8-7m4j","fix":{"state":"fixed","versions":["1.32"],"available":[{"date":"2022-12-16","kind":"first-observed","version":"1.32"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41854","cwe":"CWE-121","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-41854","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41854","date":"2026-10-08","epss":0.01548,"percentile":0.74267}],"risk":0.8900999999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-41854","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355","https://bitbucket.org/snakeyaml/snakeyaml/commits/e230a1758842beec93d28eddfde568c21774780a","https://bitbucket.org/snakeyaml/snakeyaml/issues/531","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J","https://security.netapp.com/advisory/ntap-20240315-0009","https://security.netapp.com/advisory/ntap-20240621-0006"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-w37g-rhq8-7m4j","description":"Snakeyaml vulnerable to Stack overflow leading to denial of service"},"relatedVulnerabilities":[{"id":"CVE-2022-41854","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H","metrics":{"baseScore":5.8,"impactScore":4,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41854","cwe":"CWE-121","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-41854","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41854","date":"2026-10-08","epss":0.01548,"percentile":0.74267}],"urls":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J/","https://security.netapp.com/advisory/ntap-20240315-0009/","https://security.netapp.com/advisory/ntap-20240621-0006/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41854","description":"Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1f-1ubuntu2.23"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-4741","versionConstraint":"< 1.1.1f-1ubuntu2.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-4741","fix":{"state":"fixed","versions":["1.1.1f-1ubuntu2.23"],"available":[{"date":"2024-07-31","kind":"advisory","version":"1.1.1f-1ubuntu2.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-4741","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-4741","date":"2026-10-08","epss":0.02925,"percentile":0.86654}],"risk":0.8775,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-4741"},"relatedVulnerabilities":[{"id":"CVE-2024-4741","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4741","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-4741","date":"2026-10-08","epss":0.02925,"percentile":0.86654}],"urls":["https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177","https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d","https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac","https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8","https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4","https://www.openssl.org/news/secadv/20240528.txt","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240621-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-4741","description":"Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"1.1.1f-1ubuntu2.23"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-4741","versionConstraint":"< 1.1.1f-1ubuntu2.23 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-4741","fix":{"state":"fixed","versions":["1.1.1f-1ubuntu2.23"],"available":[{"date":"2024-07-31","kind":"advisory","version":"1.1.1f-1ubuntu2.23"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-4741","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-4741","date":"2026-10-08","epss":0.02925,"percentile":0.86654}],"risk":0.8775,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-4741"},"relatedVulnerabilities":[{"id":"CVE-2024-4741","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-4741","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2024-4741","date":"2026-10-08","epss":0.02925,"percentile":0.86654}],"urls":["https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177","https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d","https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac","https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8","https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4","https://www.openssl.org/news/secadv/20240528.txt","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20240621-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-4741","description":"Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"97badb9875b0c74a","cpes":["cpe:2.3:a:perl-base:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.4?arch=amd64&distro=ubuntu-20.04&upstream=perl","type":"deb","version":"5.30.0-9ubuntu0.4","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-31486","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"perl","version":"5.30.0-9ubuntu0.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-31486","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-31486","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-31486","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-31486","date":"2026-10-08","epss":0.01742,"percentile":0.7706}],"risk":0.8710000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-31486"},"relatedVulnerabilities":[{"id":"CVE-2023-31486","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-31486","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-31486","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-31486","date":"2026-10-08","epss":0.01742,"percentile":0.7706}],"urls":["http://www.openwall.com/lists/oss-security/2023/04/29/1","http://www.openwall.com/lists/oss-security/2023/05/03/3","http://www.openwall.com/lists/oss-security/2023/05/03/5","http://www.openwall.com/lists/oss-security/2023/05/07/2","https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/","https://github.com/chansen/p5-http-tiny/pull/153","https://hackeriet.github.io/cpan-http-tiny-overview/","https://www.openwall.com/lists/oss-security/2023/04/18/14","https://www.openwall.com/lists/oss-security/2023/05/03/4","https://www.reddit.com/r/perl/comments/111tadi/psa_httptiny_disabled_ssl_verification_by_default/","https://security.netapp.com/advisory/ntap-20241129-0011/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-31486","description":"HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates."}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-33574","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2021-33574","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-33574","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-33574","date":"2026-10-08","epss":0.02874,"percentile":0.86413}],"risk":0.8622,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-33574"},"relatedVulnerabilities":[{"id":"CVE-2021-33574","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-33574","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-33574","date":"2026-10-08","epss":0.02874,"percentile":0.86413}],"urls":["https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJYYIMDDYOHTP2PORLABTOHYQYYREZDD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBUUWUGXVILQXVWEOU7N42ICHPJNAEUP/","https://security.gentoo.org/glsa/202107-07","https://security.netapp.com/advisory/ntap-20210629-0005/","https://sourceware.org/bugzilla/show_bug.cgi?id=27896","https://sourceware.org/bugzilla/show_bug.cgi?id=27896#c1"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-33574","description":"The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-33574","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2021-33574","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-33574","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-33574","date":"2026-10-08","epss":0.02874,"percentile":0.86413}],"risk":0.8622,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-33574"},"relatedVulnerabilities":[{"id":"CVE-2021-33574","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-33574","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-33574","date":"2026-10-08","epss":0.02874,"percentile":0.86413}],"urls":["https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJYYIMDDYOHTP2PORLABTOHYQYYREZDD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBUUWUGXVILQXVWEOU7N42ICHPJNAEUP/","https://security.gentoo.org/glsa/202107-07","https://security.netapp.com/advisory/ntap-20210629-0005/","https://sourceware.org/bugzilla/show_bug.cgi?id=27896","https://sourceware.org/bugzilla/show_bug.cgi?id=27896#c1"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-33574","description":"The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact."}]},{"artifact":{"id":"b082b70df3e54e06","cpes":["cpe:2.3:a:locales:locales:2.31-0ubuntu9.14:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.31-0ubuntu9.14?arch=all&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.14","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-33574","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.14"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2021-33574","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-33574","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-33574","date":"2026-10-08","epss":0.02874,"percentile":0.86413}],"risk":0.8622,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-33574"},"relatedVulnerabilities":[{"id":"CVE-2021-33574","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-33574","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-33574","date":"2026-10-08","epss":0.02874,"percentile":0.86413}],"urls":["https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJYYIMDDYOHTP2PORLABTOHYQYYREZDD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBUUWUGXVILQXVWEOU7N42ICHPJNAEUP/","https://security.gentoo.org/glsa/202107-07","https://security.netapp.com/advisory/ntap-20210629-0005/","https://sourceware.org/bugzilla/show_bug.cgi?id=27896","https://sourceware.org/bugzilla/show_bug.cgi?id=27896#c1"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-33574","description":"The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact."}]},{"artifact":{"id":"cbeb1ac80586032b","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.9-1ubuntu0.6:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.2.9-1ubuntu0.6?arch=amd64&distro=ubuntu-20.04&upstream=expat","type":"deb","version":"2.2.9-1ubuntu0.6","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.2.9-1ubuntu0.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-45490","versionConstraint":"< 2.2.9-1ubuntu0.7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"expat","version":"2.2.9-1ubuntu0.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-45490","fix":{"state":"fixed","versions":["2.2.9-1ubuntu0.7"],"available":[{"date":"2024-09-12","kind":"advisory","version":"2.2.9-1ubuntu0.7"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-45490","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-45490","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-45490","date":"2026-10-08","epss":0.01686,"percentile":0.76321}],"risk":0.843,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-45490"},"relatedVulnerabilities":[{"id":"CVE-2024-45490","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-45490","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-45490","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-45490","date":"2026-10-08","epss":0.01686,"percentile":0.76321}],"urls":["https://github.com/libexpat/libexpat/issues/887","https://github.com/libexpat/libexpat/pull/890","http://seclists.org/fulldisclosure/2024/Dec/10","http://seclists.org/fulldisclosure/2024/Dec/12","http://seclists.org/fulldisclosure/2024/Dec/6","http://seclists.org/fulldisclosure/2024/Dec/7","http://seclists.org/fulldisclosure/2024/Dec/8","https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html","https://security.netapp.com/advisory/ntap-20241018-0004/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-45490","description":"An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer."}]},{"artifact":{"id":"e7531094aa31ce73","cpes":["cpe:2.3:a:org.springframework:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-expression:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-expression:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_expression:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_expression:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_expression:5.3.22:*:*:*:*:*:*:*"],"name":"spring-expression","purl":"pkg:maven/org.springframework/spring-expression@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","manifestName":"","pomArtifactID":"spring-expression","archiveDigests":[{"value":"c056f9e9994b18c95deead695f9471952d1f21d1","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"5.3.27"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wxqc-pxw9-g2p8","versionConstraint":">=5.3.0,<5.3.27 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-expression","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wxqc-pxw9-g2p8","fix":{"state":"fixed","versions":["5.3.27"],"available":[{"date":"2024-02-03","kind":"first-observed","version":"5.3.27"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-20863","cwe":"CWE-400","type":"Secondary","source":"security@vmware.com"},{"cve":"CVE-2023-20863","cwe":"CWE-917","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-20863","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-20863","date":"2026-10-08","epss":0.01122,"percentile":0.65195}],"risk":0.8415,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-20863","https://spring.io/security/cve-2023-20863","https://github.com/spring-projects/spring-framework/commit/b73f5fcac22555f844cf27a7eeb876cb9d7f7f7e","https://github.com/spring-projects/spring-framework/commit/965a6392757d20f9db19241126fcc719a51eac15","https://github.com/spring-projects/spring-framework/commit/ebc82654282bda547fbc20a9749ab1bda886a46f","https://security.netapp.com/advisory/ntap-20240524-0015"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wxqc-pxw9-g2p8","description":"Spring Framework vulnerable to denial of service"},"relatedVulnerabilities":[{"id":"CVE-2023-20863","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-20863","cwe":"CWE-400","type":"Secondary","source":"security@vmware.com"},{"cve":"CVE-2023-20863","cwe":"CWE-917","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-20863","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-20863","date":"2026-10-08","epss":0.01122,"percentile":0.65195}],"urls":["https://security.netapp.com/advisory/ntap-20240524-0015/","https://spring.io/security/cve-2023-20863"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-20863","description":"In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.6.13-2ubuntu1.10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-0553","versionConstraint":"< 3.6.13-2ubuntu1.10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-0553","fix":{"state":"fixed","versions":["3.6.13-2ubuntu1.10"],"available":[{"date":"2024-01-22","kind":"advisory","version":"3.6.13-2ubuntu1.10"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-0553","cwe":"CWE-203","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2024-0553","cwe":"CWE-203","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-0553","date":"2026-10-08","epss":0.01614,"percentile":0.75252}],"risk":0.807,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-0553"},"relatedVulnerabilities":[{"id":"CVE-2024-0553","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-0553","cwe":"CWE-203","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2024-0553","cwe":"CWE-203","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-0553","date":"2026-10-08","epss":0.01614,"percentile":0.75252}],"urls":["https://access.redhat.com/errata/RHSA-2024:0533","https://access.redhat.com/errata/RHSA-2024:0627","https://access.redhat.com/errata/RHSA-2024:0796","https://access.redhat.com/errata/RHSA-2024:1082","https://access.redhat.com/errata/RHSA-2024:1108","https://access.redhat.com/errata/RHSA-2024:1383","https://access.redhat.com/errata/RHSA-2024:2094","https://access.redhat.com/security/cve/CVE-2024-0553","https://bugzilla.redhat.com/show_bug.cgi?id=2258412","https://gitlab.com/gnutls/gnutls/-/issues/1522","https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html","http://www.openwall.com/lists/oss-security/2024/01/19/3","https://lists.debian.org/debian-lts-announce/2024/02/msg00010.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/","https://security.netapp.com/advisory/ntap-20240202-0011/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-0553","description":"A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981."}]},{"artifact":{"id":"13bfa0f4f9d8aee0","cpes":["cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy.snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:SnappyBundleActivator:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:SnappyBundleActivator:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:org.xerial.snappy:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy-java:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy_java:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:snappy-java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:snappy_java:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial-org:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial_org:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:snappy:snappy:1.1.8.4:*:*:*:*:*:*:*","cpe:2.3:a:xerial:snappy:1.1.8.4:*:*:*:*:*:*:*"],"name":"snappy-java","purl":"pkg:maven/org.xerial.snappy/snappy-java@1.1.8.4","type":"java-archive","version":"1.1.8.4","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.xerial.snappy","virtualPath":"/usr/lib/unifi/lib/snappy-java-1.1.8.4.jar","manifestName":"","pomArtifactID":"snappy-java","archiveDigests":[{"value":"66f0d56454509f6e36175f2331572e250e04a6cc","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/snappy-java-1.1.8.4.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/snappy-java-1.1.8.4.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.1.10.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-fjpj-2g6w-x25r","versionConstraint":"<=1.1.10.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.xerial.snappy:snappy-java","version":"1.1.8.4"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-fjpj-2g6w-x25r","fix":{"state":"fixed","versions":["1.1.10.1"],"available":[{"date":"2023-06-16","kind":"first-observed","version":"1.1.10.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34454","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-34454","date":"2026-10-08","epss":0.01469,"percentile":0.72956}],"risk":0.800605,"urls":["https://github.com/xerial/snappy-java/security/advisories/GHSA-fjpj-2g6w-x25r","https://github.com/xerial/snappy-java/commit/d0042551e4a3509a725038eb9b2ad1f683674d94","https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/Snappy.java#L169","https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/Snappy.java#L422","https://github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/Snappy.java","https://nvd.nist.gov/vuln/detail/CVE-2023-34454"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-fjpj-2g6w-x25r","description":"snappy-java's Integer Overflow vulnerability in compress leads to DoS"},"relatedVulnerabilities":[{"id":"CVE-2023-34454","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34454","cwe":"CWE-190","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-34454","date":"2026-10-08","epss":0.01469,"percentile":0.72956}],"urls":["https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/Snappy.java#L169","https://github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/Snappy.java#L422","https://github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/Snappy.java","https://github.com/xerial/snappy-java/commit/d0042551e4a3509a725038eb9b2ad1f683674d94","https://github.com/xerial/snappy-java/security/advisories/GHSA-fjpj-2g6w-x25r"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34454","description":"snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1, causing an unrecoverable fatal error.\n\nThe function `compress(char[] input)` in the file `Snappy.java` receives an array of characters and compresses it. It does so by multiplying the length by 2 and passing it to the rawCompress` function.\n\nSince the length is not tested, the multiplication by two can cause an integer overflow and become negative. The rawCompress function then uses the received length and passes it to the natively compiled maxCompressedLength function, using the returned value to allocate a byte array.\n\nSince the maxCompressedLength function treats the length as an unsigned integer, it doesn’t care that it is negative, and it returns a valid value, which is casted to a signed integer by the Java engine. If the result is negative, a `java.lang.NegativeArraySizeException` exception will be raised while trying to allocate the array `buf`. On the other side, if the result is positive, the `buf` array will successfully be allocated, but its size might be too small to use for the compression, causing a fatal Access Violation error.\n\nThe same issue exists also when using the `compress` functions that receive double, float, int, long and short, each using a different multiplier that may cause the same issue. The issue most likely won’t occur when using a byte array, since creating a byte array of size 0x80000000 (or any other negative value) is impossible in the first place.\n\nVersion 1.1.10.1 contains a patch for this issue."}]},{"artifact":{"id":"e17b266d1d27c88b","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3","type":"java-archive","version":"2.13.3","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"56deb9ea2c93a7a556b3afbedd616d342963464e","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.18.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-j3rv-43j4-c7qm","versionConstraint":">=2.10.0,<=2.18.7 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.13.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-j3rv-43j4-c7qm","fix":{"state":"fixed","versions":["2.18.8"],"available":[{"date":"2026-06-24","kind":"first-observed","version":"2.18.8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54512","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54512","cwe":"CWE-502","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54512","date":"2026-10-08","epss":0.00999,"percentile":0.61664}],"risk":0.7792200000000001,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm","https://github.com/FasterXML/jackson-databind/issues/5988","https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","https://nvd.nist.gov/vuln/detail/CVE-2026-54512"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-j3rv-43j4-c7qm","description":"jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation"},"relatedVulnerabilities":[{"id":"CVE-2026-54512","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54512","cwe":"CWE-184","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54512","cwe":"CWE-502","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54512","date":"2026-10-08","epss":0.00999,"percentile":0.61664}],"urls":["https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5","https://github.com/FasterXML/jackson-databind/issues/5988","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54512","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4, jackson-databind's PolymorphicTypeValidator (PTV) is the primary safety mechanism guarding polymorphic deserialization. When polymorphic typing is enabled and a type identifier contains generic parameters (i.e. the type ID string contains <), DatabindContext._resolveAndValidateGeneric() validates only the raw container class name (the substring before <) against the configured PTV. If the container type is approved, the method parses the full canonical type string via TypeFactory.constructFromCanonical() and returns the fully parameterized type without ever validating the nested type arguments against the PTV. The nested type arguments are then resolved, instantiated, and populated as beans during deserialization. An attacker who controls the type ID can therefore place a denied class as a generic type parameter of an allowed container — for example java.util.ArrayList<com.evil.Gadget> when only java.util.ArrayList is allow-listed. The container passes the PTV check; com.evil.Gadget is loaded via Class.forName(name, true, loader), instantiated, and its properties are set from attacker-controlled JSON. This completely bypasses an explicitly configured PTV allow-list. This vulnerability is fixed in 2.18.8, 2.21.4, and 3.1.4."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-9230","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-9230","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-9230","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-9230","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9230","date":"2026-10-08","epss":0.01554,"percentile":0.74399}],"risk":0.777,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-9230"},"relatedVulnerabilities":[{"id":"CVE-2025-9230","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9230","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-9230","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9230","date":"2026-10-08","epss":0.01554,"percentile":0.74399}],"urls":["https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45","https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280","https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def","https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd","https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482","https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3","https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba","https://openssl-library.org/news/secadv/20250930.txt","http://www.openwall.com/lists/oss-security/2025/09/30/5","https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-089022.html","https://cert-portal.siemens.com/productcert/html/ssa-253495.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-485750.html","https://cert-portal.siemens.com/productcert/html/ssa-585531.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-9230","description":"Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-9230","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-9230","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-9230","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-9230","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9230","date":"2026-10-08","epss":0.01554,"percentile":0.74399}],"risk":0.777,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-9230"},"relatedVulnerabilities":[{"id":"CVE-2025-9230","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-9230","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2025-9230","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-9230","date":"2026-10-08","epss":0.01554,"percentile":0.74399}],"urls":["https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45","https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280","https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def","https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd","https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482","https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3","https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba","https://openssl-library.org/news/secadv/20250930.txt","http://www.openwall.com/lists/oss-security/2025/09/30/5","https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-089022.html","https://cert-portal.siemens.com/productcert/html/ssa-253495.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-485750.html","https://cert-portal.siemens.com/productcert/html/ssa-585531.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-9230","description":"Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary."}]},{"artifact":{"id":"3c96e5014ea74a87","cpes":["cpe:2.3:a:bouncycastle-org:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov_jdk15on:1.60:*:*:*:*:*:*:*"],"name":"bcprov-jdk15on","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.60","type":"java-archive","version":"1.60","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","manifestName":"","pomArtifactID":"bcprov-jdk15on","archiveDigests":[{"value":"bd47ad3bd14b8e82595c7adaa143501e60842a84","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.66"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-6xx3-rg99-gc3p","versionConstraint":"<1.66 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bcprov-jdk15on","version":"1.60"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-6xx3-rg99-gc3p","fix":{"state":"fixed","versions":["1.66"],"available":[{"date":"2021-08-14","kind":"first-observed","version":"1.66"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.1,"impactScore":3.6,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-15522","cwe":"CWE-362","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-15522","date":"2026-10-08","epss":0.01522,"percentile":0.73849}],"risk":0.7686099999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2020-15522","https://github.com/bcgit/bc-csharp/wiki/CVE-2020-15522","https://github.com/bcgit/bc-java/wiki/CVE-2020-15522","https://www.bouncycastle.org/releasenotes.html","https://security.netapp.com/advisory/ntap-20210622-0007"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-6xx3-rg99-gc3p","description":"Timing based private key exposure in Bouncy Castle"},"relatedVulnerabilities":[{"id":"CVE-2020-15522","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-15522","cwe":"CWE-362","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-15522","date":"2026-10-08","epss":0.01522,"percentile":0.73849}],"urls":["https://github.com/bcgit/bc-csharp/wiki/CVE-2020-15522","https://github.com/bcgit/bc-java/wiki/CVE-2020-15522","https://security.netapp.com/advisory/ntap-20210622-0007/","https://www.bouncycastle.org/releasenotes.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-15522","description":"Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures."}]},{"artifact":{"id":"52c49f6ac3ce8246","cpes":["cpe:2.3:a:libyaml-cpp0.6:libyaml-cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml-cpp0.6:libyaml_cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml_cpp0.6:libyaml-cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml_cpp0.6:libyaml_cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml:libyaml-cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml:libyaml_cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*"],"name":"libyaml-cpp0.6","purl":"pkg:deb/ubuntu/libyaml-cpp0.6@0.6.2-4ubuntu1?arch=amd64&distro=ubuntu-20.04&upstream=yaml-cpp","type":"deb","version":"0.6.2-4ubuntu1","language":"","licenses":["GPL-2","GPL-2.0+","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libyaml-cpp0.6/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libyaml-cpp0.6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libyaml-cpp0.6:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libyaml-cpp0.6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"yaml-cpp"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20573","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"yaml-cpp","version":"0.6.2-4ubuntu1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-20573","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20573","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20573","date":"2026-10-08","epss":0.02536,"percentile":0.84474}],"risk":0.7608,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-20573"},"relatedVulnerabilities":[{"id":"CVE-2018-20573","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20573","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20573","date":"2026-10-08","epss":0.02536,"percentile":0.84474}],"urls":["https://github.com/jbeder/yaml-cpp/issues/655","http://seclists.org/fulldisclosure/2024/Nov/0"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20573","description":"The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file."}]},{"artifact":{"id":"52c49f6ac3ce8246","cpes":["cpe:2.3:a:libyaml-cpp0.6:libyaml-cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml-cpp0.6:libyaml_cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml_cpp0.6:libyaml-cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml_cpp0.6:libyaml_cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml:libyaml-cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml:libyaml_cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*"],"name":"libyaml-cpp0.6","purl":"pkg:deb/ubuntu/libyaml-cpp0.6@0.6.2-4ubuntu1?arch=amd64&distro=ubuntu-20.04&upstream=yaml-cpp","type":"deb","version":"0.6.2-4ubuntu1","language":"","licenses":["GPL-2","GPL-2.0+","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libyaml-cpp0.6/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libyaml-cpp0.6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libyaml-cpp0.6:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libyaml-cpp0.6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"yaml-cpp"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20574","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"yaml-cpp","version":"0.6.2-4ubuntu1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-20574","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20574","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20574","date":"2026-10-08","epss":0.02525,"percentile":0.84398}],"risk":0.7575000000000001,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-20574"},"relatedVulnerabilities":[{"id":"CVE-2018-20574","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20574","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20574","date":"2026-10-08","epss":0.02525,"percentile":0.84398}],"urls":["https://github.com/jbeder/yaml-cpp/issues/654","http://seclists.org/fulldisclosure/2024/Nov/0"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20574","description":"The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file."}]},{"artifact":{"id":"52c49f6ac3ce8246","cpes":["cpe:2.3:a:libyaml-cpp0.6:libyaml-cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml-cpp0.6:libyaml_cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml_cpp0.6:libyaml-cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml_cpp0.6:libyaml_cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml:libyaml-cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml:libyaml_cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*"],"name":"libyaml-cpp0.6","purl":"pkg:deb/ubuntu/libyaml-cpp0.6@0.6.2-4ubuntu1?arch=amd64&distro=ubuntu-20.04&upstream=yaml-cpp","type":"deb","version":"0.6.2-4ubuntu1","language":"","licenses":["GPL-2","GPL-2.0+","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libyaml-cpp0.6/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libyaml-cpp0.6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libyaml-cpp0.6:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libyaml-cpp0.6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"yaml-cpp"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-6285","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"yaml-cpp","version":"0.6.2-4ubuntu1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-6285","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-6285","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-6285","date":"2026-10-08","epss":0.02525,"percentile":0.84398}],"risk":0.7575000000000001,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-6285"},"relatedVulnerabilities":[{"id":"CVE-2019-6285","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-6285","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-6285","date":"2026-10-08","epss":0.02525,"percentile":0.84398}],"urls":["https://github.com/jbeder/yaml-cpp/issues/660","http://seclists.org/fulldisclosure/2024/Nov/0"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-6285","description":"The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-28388","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-28388","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-08","epss":0.02501,"percentile":0.84231}],"risk":0.7503,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-28388"},"relatedVulnerabilities":[{"id":"CVE-2026-28388","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-08","epss":0.02501,"percentile":0.84231}],"urls":["https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e","https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139","https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3","https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8","https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28388","description":"Issue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-28388","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-28388","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-08","epss":0.02501,"percentile":0.84231}],"risk":0.7503,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-28388"},"relatedVulnerabilities":[{"id":"CVE-2026-28388","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28388","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28388","date":"2026-10-08","epss":0.02501,"percentile":0.84231}],"urls":["https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e","https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139","https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3","https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8","https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28388","description":"Issue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-28389","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-28389","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-08","epss":0.02435,"percentile":0.83783}],"risk":0.7305,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-28389"},"relatedVulnerabilities":[{"id":"CVE-2026-28389","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-08","epss":0.02435,"percentile":0.83783}],"urls":["https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5","https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616","https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f","https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a","https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28389","description":"Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-28389","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-28389","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-08","epss":0.02435,"percentile":0.83783}],"risk":0.7305,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-28389"},"relatedVulnerabilities":[{"id":"CVE-2026-28389","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28389","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28389","date":"2026-10-08","epss":0.02435,"percentile":0.83783}],"urls":["https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5","https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616","https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f","https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a","https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28389","description":"Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-7928","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2020-7928","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-7928","cwe":"CWE-158","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7928","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7928","date":"2026-10-08","epss":0.01442,"percentile":0.72422}],"risk":0.721,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2020-7928"},"relatedVulnerabilities":[{"id":"CVE-2020-7928","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7928","cwe":"CWE-158","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7928","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7928","date":"2026-10-08","epss":0.01442,"percentile":0.72422}],"urls":["https://jira.mongodb.org/browse/SERVER-49404"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7928","description":"A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and MongoDB Server v3.6 versions prior to 3.6.20."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-7928","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2020-7928","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-7928","cwe":"CWE-158","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7928","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7928","date":"2026-10-08","epss":0.01442,"percentile":0.72422}],"risk":0.721,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2020-7928"},"relatedVulnerabilities":[{"id":"CVE-2020-7928","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7928","cwe":"CWE-158","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7928","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7928","date":"2026-10-08","epss":0.01442,"percentile":0.72422}],"urls":["https://jira.mongodb.org/browse/SERVER-49404"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7928","description":"A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and MongoDB Server v3.6 versions prior to 3.6.20."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-7928","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2020-7928","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-7928","cwe":"CWE-158","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7928","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7928","date":"2026-10-08","epss":0.01442,"percentile":0.72422}],"risk":0.721,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2020-7928"},"relatedVulnerabilities":[{"id":"CVE-2020-7928","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7928","cwe":"CWE-158","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7928","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7928","date":"2026-10-08","epss":0.01442,"percentile":0.72422}],"urls":["https://jira.mongodb.org/browse/SERVER-49404"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7928","description":"A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4.1; MongoDB Server v4.2 versions prior to 4.2.9; MongoDB Server v4.0 versions prior to 4.0.20 and MongoDB Server v3.6 versions prior to 3.6.20."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20803","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-20803","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20803","cwe":"CWE-835","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20803","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20803","date":"2026-10-08","epss":0.0144,"percentile":0.72384}],"risk":0.72,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-20803"},"relatedVulnerabilities":[{"id":"CVE-2018-20803","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20803","cwe":"CWE-835","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20803","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20803","date":"2026-10-08","epss":0.0144,"percentile":0.72384}],"urls":["https://jira.mongodb.org/browse/SERVER-38070"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20803","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects MongoDB Server v4.0 versions prior to 4.0.5; MongoDB Server v3.6 versions prior to 3.6.10 and MongoDB Server v3.4 versions prior to 3.4.19."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20803","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-20803","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20803","cwe":"CWE-835","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20803","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20803","date":"2026-10-08","epss":0.0144,"percentile":0.72384}],"risk":0.72,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-20803"},"relatedVulnerabilities":[{"id":"CVE-2018-20803","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20803","cwe":"CWE-835","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20803","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20803","date":"2026-10-08","epss":0.0144,"percentile":0.72384}],"urls":["https://jira.mongodb.org/browse/SERVER-38070"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20803","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects MongoDB Server v4.0 versions prior to 4.0.5; MongoDB Server v3.6 versions prior to 3.6.10 and MongoDB Server v3.4 versions prior to 3.4.19."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20803","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-20803","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20803","cwe":"CWE-835","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20803","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20803","date":"2026-10-08","epss":0.0144,"percentile":0.72384}],"risk":0.72,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-20803"},"relatedVulnerabilities":[{"id":"CVE-2018-20803","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20803","cwe":"CWE-835","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20803","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20803","date":"2026-10-08","epss":0.0144,"percentile":0.72384}],"urls":["https://jira.mongodb.org/browse/SERVER-38070"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20803","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects MongoDB Server v4.0 versions prior to 4.0.5; MongoDB Server v3.6 versions prior to 3.6.10 and MongoDB Server v3.4 versions prior to 3.4.19."}]},{"artifact":{"id":"75f53734df5b814d","cpes":["cpe:2.3:a:com.google.protobuf:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.protobuf:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.protobuf:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf:3.6.0:*:*:*:*:*:*:*"],"name":"protobuf-java","purl":"pkg:maven/com.google.protobuf/protobuf-java@3.6.0","type":"java-archive","version":"3.6.0","language":"java","licenses":["https://opensource.org/licenses/BSD-3-Clause"],"metadata":{"pomGroupID":"com.google.protobuf","virtualPath":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","manifestName":"","pomArtifactID":"protobuf-java","archiveDigests":[{"value":"5333f7e422744d76840c08a106e28e519fbe3acd","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.16.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-g5ww-5jh7-63cx","versionConstraint":">=3.0.0,<3.16.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.google.protobuf:protobuf-java","version":"3.6.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-g5ww-5jh7-63cx","fix":{"state":"fixed","versions":["3.16.3"],"available":[{"date":"2022-12-14","kind":"first-observed","version":"3.16.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3509","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-3509","date":"2026-10-08","epss":0.00955,"percentile":0.60217}],"risk":0.7162499999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-3509","https://github.com/protocolbuffers/protobuf/commit/a3888f53317a8018e7a439bac4abeb8f3425d5e9","https://github.com/protocolbuffers/protobuf/blob/v2.6.1/java/core/src/main/java/com/google/protobuf/MessageReflection.java","https://github.com/protocolbuffers/protobuf/blob/v3.0.0/java/core/src/main/java/com/google/protobuf/MessageReflection.java"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-g5ww-5jh7-63cx","description":"Protobuf Java vulnerable to Uncontrolled Resource Consumption"},"relatedVulnerabilities":[{"id":"CVE-2022-3509","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3509","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-3509","date":"2026-10-08","epss":0.00955,"percentile":0.60217}],"urls":["https://github.com/protocolbuffers/protobuf/commit/a3888f53317a8018e7a439bac4abeb8f3425d5e9"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3509","description":"A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above."}]},{"artifact":{"id":"0ecb0928f40bd774","cpes":["cpe:2.3:a:libssh-4:libssh-4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh-4:libssh_4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh_4:libssh-4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh_4:libssh_4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh-4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh_4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*"],"name":"libssh-4","purl":"pkg:deb/ubuntu/libssh-4@0.9.3-2ubuntu2.4?arch=amd64&distro=ubuntu-20.04&upstream=libssh","type":"deb","version":"0.9.3-2ubuntu2.4","language":"","licenses":["BSD-2-clause","BSD-3-clause","LGPL-2.1","LGPL-2.1+~OpenSSL","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssh-4/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssh-4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssh-4:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssh-4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libssh"}]},"matchDetails":[{"fix":{"suggestedVersion":"0.9.3-2ubuntu2.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-6918","versionConstraint":"< 0.9.3-2ubuntu2.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"libssh","version":"0.9.3-2ubuntu2.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-6918","fix":{"state":"fixed","versions":["0.9.3-2ubuntu2.5"],"available":[{"date":"2024-01-22","kind":"advisory","version":"0.9.3-2ubuntu2.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-6918","cwe":"CWE-252","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-6918","cwe":"CWE-252","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6918","date":"2026-10-08","epss":0.01409,"percentile":0.71824}],"risk":0.7045,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-6918"},"relatedVulnerabilities":[{"id":"CVE-2023-6918","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6918","cwe":"CWE-252","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-6918","cwe":"CWE-252","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6918","date":"2026-10-08","epss":0.01409,"percentile":0.71824}],"urls":["https://access.redhat.com/errata/RHSA-2024:2504","https://access.redhat.com/errata/RHSA-2024:3233","https://access.redhat.com/security/cve/CVE-2023-6918","https://bugzilla.redhat.com/show_bug.cgi?id=2254997","https://www.libssh.org/2023/12/18/libssh-0-10-6-and-libssh-0-9-8-security-releases/","https://www.libssh.org/security/advisories/CVE-2023-6918.txt","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/","https://security.netapp.com/advisory/ntap-20250214-0009/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6918","description":"A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection."}]},{"artifact":{"id":"cbeb1ac80586032b","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.9-1ubuntu0.6:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.2.9-1ubuntu0.6?arch=amd64&distro=ubuntu-20.04&upstream=expat","type":"deb","version":"2.2.9-1ubuntu0.6","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.2.9-1ubuntu0.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-45492","versionConstraint":"< 2.2.9-1ubuntu0.7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"expat","version":"2.2.9-1ubuntu0.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-45492","fix":{"state":"fixed","versions":["2.2.9-1ubuntu0.7"],"available":[{"date":"2024-09-12","kind":"advisory","version":"2.2.9-1ubuntu0.7"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-45492","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-45492","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-45492","date":"2026-10-08","epss":0.01393,"percentile":0.71532}],"risk":0.6965,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-45492"},"relatedVulnerabilities":[{"id":"CVE-2024-45492","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-45492","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-45492","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-45492","date":"2026-10-08","epss":0.01393,"percentile":0.71532}],"urls":["https://github.com/libexpat/libexpat/issues/889","https://github.com/libexpat/libexpat/pull/892","https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html","https://security.netapp.com/advisory/ntap-20241018-0005/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-45492","description":"An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX)."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.105"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h2fw-rfh5-95r3","versionConstraint":">=9.0.0.M1,<9.0.105 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-h2fw-rfh5-95r3","fix":{"state":"fixed","versions":["9.0.105"],"available":[{"date":"2025-05-30","kind":"first-observed","version":"9.0.105"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear","metrics":{"baseScore":1.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-46701","cwe":"CWE-178","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-46701","date":"2026-10-08","epss":0.02925,"percentile":0.86651}],"risk":0.687375,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-46701","https://lists.apache.org/thread/xhqqk9w5q45srcdqhogdk04lhdscv30j","https://github.com/apache/tomcat/commit/0f01966eb60015d975525019e12a087f05ebf01a","https://github.com/apache/tomcat/commit/238d2aa54b99f91d1111467e2237d2244c64e558","https://github.com/apache/tomcat/commit/2c6800111e7d8d8d5403c07978ea9bff3db5a5a5","https://github.com/apache/tomcat/commit/8cb95ff03221067c511b3fa66d4f745bc4b0a605","https://github.com/apache/tomcat/commit/8df00018a252baa9497615d6420fb6c10466fa74","https://github.com/apache/tomcat/commit/fab7247d2f0e3a29d5daef565f829f383e10e5e2","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.41","https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.7","https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.105","http://www.openwall.com/lists/oss-security/2025/05/29/4","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"],"severity":"Low","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h2fw-rfh5-95r3","description":"Apache Tomcat - CGI security constraint bypass"},"relatedVulnerabilities":[{"id":"CVE-2025-46701","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-46701","cwe":"CWE-178","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-46701","date":"2026-10-08","epss":0.02925,"percentile":0.86651}],"urls":["https://lists.apache.org/thread/xhqqk9w5q45srcdqhogdk04lhdscv30j","http://www.openwall.com/lists/oss-security/2025/05/29/4","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-46701","description":"Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1 through 10.1.40, from 9.0.0.M1 through 9.0.104.\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions \nmay also be affected.\n\n\nUsers are recommended to upgrade to version 11.0.7, 10.1.41 or 9.0.105, which fixes the issue."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-32988","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-32988","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-32988","cwe":"CWE-415","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32988","date":"2026-10-08","epss":0.01373,"percentile":0.71137}],"risk":0.6865,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-32988"},"relatedVulnerabilities":[{"id":"CVE-2025-32988","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-32988","cwe":"CWE-415","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32988","date":"2026-10-08","epss":0.01373,"percentile":0.71137}],"urls":["https://access.redhat.com/errata/RHSA-2025:16115","https://access.redhat.com/errata/RHSA-2025:16116","https://access.redhat.com/errata/RHSA-2025:17181","https://access.redhat.com/errata/RHSA-2025:17348","https://access.redhat.com/errata/RHSA-2025:17361","https://access.redhat.com/errata/RHSA-2025:17415","https://access.redhat.com/errata/RHSA-2025:19088","https://access.redhat.com/errata/RHSA-2025:22529","https://access.redhat.com/errata/RHSA-2026:7477","https://access.redhat.com/security/cve/CVE-2025-32988","https://bugzilla.redhat.com/show_bug.cgi?id=2359622","https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html","http://www.openwall.com/lists/oss-security/2025/07/11/3","https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-32988","description":"A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not own, leading to a double-free condition when the parent function or caller later attempts to free the same structure.\n\nThis vulnerability can be triggered using only public GnuTLS APIs and may result in denial of service or memory corruption, depending on allocator behavior."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.11+9-1~20.04.2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-21011","versionConstraint":"< 17.0.11+9-1~20.04.2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-21011","fix":{"state":"fixed","versions":["17.0.11+9-1~20.04.2"],"available":[{"date":"2024-06-06","kind":"advisory","version":"17.0.11+9-1~20.04.2"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-21011","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21011","date":"2026-10-08","epss":0.01372,"percentile":0.7112}],"risk":0.6859999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-21011"},"relatedVulnerabilities":[{"id":"CVE-2024-21011","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21011","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21011","date":"2026-10-08","epss":0.01372,"percentile":0.7112}],"urls":["https://lists.debian.org/debian-lts-announce/2024/04/msg00014.html","https://security.netapp.com/advisory/ntap-20240426-0004/","https://www.oracle.com/security-alerts/cpuapr2024.html","https://openjdk.org/groups/vulnerability/advisories/2024-04-16"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21011","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22;   Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"736e057e7c449671","cpes":["cpe:2.3:a:spring-boot-autoconfigure:spring-boot-autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-boot-autoconfigure:spring_boot_autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_boot_autoconfigure:spring-boot-autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_boot_autoconfigure:spring_boot_autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework.boot:spring-boot-autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework.boot:spring_boot_autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-boot-autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_boot_autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-boot:spring-boot-autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-boot:spring_boot_autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_boot:spring-boot-autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_boot:spring_boot_autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-boot-autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_boot_autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:boot:spring-boot-autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:boot:spring_boot_autoconfigure:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-boot-autoconfigure:boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_boot_autoconfigure:boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework.boot:boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:springframework:boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-boot:boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_boot:boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring:boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:boot:boot:2.7.2:*:*:*:*:*:*:*"],"name":"spring-boot-autoconfigure","purl":"pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.2","type":"java-archive","version":"2.7.2","language":"java","licenses":["Apache-2.0"],"metadata":{"pomGroupID":"org.springframework.boot","virtualPath":"/usr/lib/unifi/lib/spring-boot-autoconfigure-2.7.2.jar","manifestName":"","pomArtifactID":"spring-boot-autoconfigure","archiveDigests":[{"value":"f358e3f8ce01d3a26605fa23f9d3fd408726b033","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-boot-autoconfigure-2.7.2.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-boot-autoconfigure-2.7.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.7.12"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-xf96-w227-r7c4","versionConstraint":">=2.7.0,<2.7.12 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework.boot:spring-boot-autoconfigure","version":"2.7.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-xf96-w227-r7c4","fix":{"state":"fixed","versions":["2.7.12"],"available":[{"date":"2023-05-27","kind":"first-observed","version":"2.7.12"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-20883","cwe":"CWE-400","type":"Secondary","source":"security@vmware.com"},{"cve":"CVE-2023-20883","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-20883","date":"2026-10-08","epss":0.00911,"percentile":0.58788}],"risk":0.68325,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-20883","https://spring.io/security/cve-2023-20883","https://github.com/spring-projects/spring-boot/issues/35552","https://github.com/spring-projects/spring-boot/commit/418dd1ba5bdad79b55a043000164bfcbda2acd78","https://github.com/spring-projects/spring-boot/releases/tag/v2.5.15","https://github.com/spring-projects/spring-boot/releases/tag/v2.6.15","https://github.com/spring-projects/spring-boot/releases/tag/v2.7.12","https://security.netapp.com/advisory/ntap-20230703-0008/"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-xf96-w227-r7c4","description":"Spring Boot Welcome Page Denial of Service"},"relatedVulnerabilities":[{"id":"CVE-2023-20883","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-20883","cwe":"CWE-400","type":"Secondary","source":"security@vmware.com"},{"cve":"CVE-2023-20883","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-20883","date":"2026-10-08","epss":0.00911,"percentile":0.58788}],"urls":["https://security.netapp.com/advisory/ntap-20230703-0008/","https://spring.io/security/cve-2023-20883"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-20883","description":"In Spring Boot versions 3.0.0 - 3.0.6, 2.7.0 - 2.7.11, 2.6.0 - 2.6.14, 2.5.0 - 2.5.14 and older unsupported versions, there is potential for a denial-of-service (DoS) attack if Spring MVC is used together with a reverse proxy cache."}]},{"artifact":{"id":"cbeb1ac80586032b","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.9-1ubuntu0.6:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.2.9-1ubuntu0.6?arch=amd64&distro=ubuntu-20.04&upstream=expat","type":"deb","version":"2.2.9-1ubuntu0.6","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-8176","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"expat","version":"2.2.9-1ubuntu0.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-8176","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2024-8176","cwe":"CWE-674","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-8176","date":"2026-10-08","epss":0.01353,"percentile":0.70728}],"risk":0.6765,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-8176"},"relatedVulnerabilities":[{"id":"CVE-2024-8176","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-8176","cwe":"CWE-674","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-8176","date":"2026-10-08","epss":0.01353,"percentile":0.70728}],"urls":["https://access.redhat.com/errata/RHSA-2025:13681","https://access.redhat.com/errata/RHSA-2025:22033","https://access.redhat.com/errata/RHSA-2025:22034","https://access.redhat.com/errata/RHSA-2025:22035","https://access.redhat.com/errata/RHSA-2025:22607","https://access.redhat.com/errata/RHSA-2025:22785","https://access.redhat.com/errata/RHSA-2025:22842","https://access.redhat.com/errata/RHSA-2025:22871","https://access.redhat.com/errata/RHSA-2025:3531","https://access.redhat.com/errata/RHSA-2025:3734","https://access.redhat.com/errata/RHSA-2025:3913","https://access.redhat.com/errata/RHSA-2025:4048","https://access.redhat.com/errata/RHSA-2025:4446","https://access.redhat.com/errata/RHSA-2025:4447","https://access.redhat.com/errata/RHSA-2025:4448","https://access.redhat.com/errata/RHSA-2025:4449","https://access.redhat.com/errata/RHSA-2025:7444","https://access.redhat.com/errata/RHSA-2025:7512","https://access.redhat.com/errata/RHSA-2025:8385","https://access.redhat.com/security/cve/CVE-2024-8176","https://bugzilla.redhat.com/show_bug.cgi?id=2310137","https://github.com/libexpat/libexpat/issues/893","https://github.com/libexpat/libexpat/pull/973","http://seclists.org/fulldisclosure/2025/May/10","http://seclists.org/fulldisclosure/2025/May/11","http://seclists.org/fulldisclosure/2025/May/12","http://seclists.org/fulldisclosure/2025/May/6","http://seclists.org/fulldisclosure/2025/May/7","http://seclists.org/fulldisclosure/2025/May/8","http://www.openwall.com/lists/oss-security/2025/03/15/1","http://www.openwall.com/lists/oss-security/2025/09/24/11","https://blog.hartwork.org/posts/expat-2-7-0-released/","https://bugzilla.suse.com/show_bug.cgi?id=1239618","https://github.com/libexpat/libexpat/blob/R_2_7_0/expat/Changes#L40-L52","https://gitlab.alpinelinux.org/alpine/aports/-/commit/d068c3ff36fc6f4789988a09c69b434db757db53","https://security-tracker.debian.org/tracker/CVE-2024-8176","https://security.netapp.com/advisory/ntap-20250328-0009/","https://ubuntu.com/security/CVE-2024-8176","https://www.kb.cert.org/vuls/id/760160"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-8176","description":"A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage."}]},{"artifact":{"id":"52c49f6ac3ce8246","cpes":["cpe:2.3:a:libyaml-cpp0.6:libyaml-cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml-cpp0.6:libyaml_cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml_cpp0.6:libyaml-cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml_cpp0.6:libyaml_cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml:libyaml-cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:libyaml:libyaml_cpp0.6:0.6.2-4ubuntu1:*:*:*:*:*:*:*"],"name":"libyaml-cpp0.6","purl":"pkg:deb/ubuntu/libyaml-cpp0.6@0.6.2-4ubuntu1?arch=amd64&distro=ubuntu-20.04&upstream=yaml-cpp","type":"deb","version":"0.6.2-4ubuntu1","language":"","licenses":["GPL-2","GPL-2.0+","X11"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libyaml-cpp0.6/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libyaml-cpp0.6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libyaml-cpp0.6:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libyaml-cpp0.6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"yaml-cpp"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-11692","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"yaml-cpp","version":"0.6.2-4ubuntu1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2017-11692","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-11692","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-11692","date":"2026-10-08","epss":0.02249,"percentile":0.82367}],"risk":0.6747,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2017-11692"},"relatedVulnerabilities":[{"id":"CVE-2017-11692","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-11692","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-11692","date":"2026-10-08","epss":0.02249,"percentile":0.82367}],"urls":["https://github.com/jbeder/yaml-cpp/issues/519","https://security.gentoo.org/glsa/202007-14"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-11692","description":"The function \"Token& Scanner::peek\" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion failure and application exit) via a '!2' string."}]},{"artifact":{"id":"fb5a34ec95412e7a","cpes":["cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1-6:libtasn1_6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1_6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1_6:4.16.0-2:*:*:*:*:*:*:*"],"name":"libtasn1-6","purl":"pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"4.16.0-2","language":"","licenses":["sha256:ab2f3532a1bf45d90643e92c1dfb985982698ecbf63f12595acfd9598d36350d"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtasn1-6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libtasn1-6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-46848","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"libtasn1-6","version":"4.16.0-2"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2021-46848","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-46848","cwe":"CWE-193","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-46848","cwe":"CWE-193","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-46848","date":"2026-10-08","epss":0.02203,"percentile":0.81992}],"risk":0.6609,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-46848"},"relatedVulnerabilities":[{"id":"CVE-2021-46848","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-46848","cwe":"CWE-193","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-46848","cwe":"CWE-193","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-46848","date":"2026-10-08","epss":0.02203,"percentile":0.81992}],"urls":["https://bugs.gentoo.org/866237","https://gitlab.com/gnutls/libtasn1/-/commit/44a700d2051a666235748970c2df047ff207aeb5","https://gitlab.com/gnutls/libtasn1/-/issues/32","https://lists.debian.org/debian-lts-announce/2023/01/msg00003.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AV4SHDJF2XLB4CUPTBPQQ6CLGZ5LKXPZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECM2ELTVRYV4BZ5L5GMIRQE27RFHPAQ6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGO7XST4EIJGX4B2ITZCYSWM24534BSU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V5LWOGF7QRMNFRUCZY6TDYQJVFI6MOQ2/","https://security.netapp.com/advisory/ntap-20221118-0006/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-46848","description":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der."}]},{"artifact":{"id":"ecdba12e72372c34","cpes":["cpe:2.3:a:org.yaml.snakeyaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:snakeyaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:org.yaml:snakeyaml:1.30:*:*:*:*:*:*:*","cpe:2.3:a:yaml:snakeyaml:1.30:*:*:*:*:*:*:*"],"name":"snakeyaml","purl":"pkg:maven/org.yaml/snakeyaml@1.30","type":"java-archive","version":"1.30","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.yaml","virtualPath":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","manifestName":"","pomArtifactID":"snakeyaml","archiveDigests":[{"value":"8fde7fe2586328ac3c68db92045e1c8759125000","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/snakeyaml-1.30.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.31"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-hhhw-99gj-p3c3","versionConstraint":"<1.31 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.yaml:snakeyaml","version":"1.30"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-hhhw-99gj-p3c3","fix":{"state":"fixed","versions":["1.31"],"available":[{"date":"2022-09-18","kind":"first-observed","version":"1.31"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-38750","cwe":"CWE-121","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-38750","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-38750","date":"2026-10-08","epss":0.01253,"percentile":0.68566}],"risk":0.657825,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-38750","https://bitbucket.org/snakeyaml/snakeyaml/issues/526/stackoverflow-oss-fuzz-47027","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47027","https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html","https://security.gentoo.org/glsa/202305-28","https://security.netapp.com/advisory/ntap-20240315-0010"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-hhhw-99gj-p3c3","description":"snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write"},"relatedVulnerabilities":[{"id":"CVE-2022-38750","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-38750","cwe":"CWE-121","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2022-38750","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-38750","date":"2026-10-08","epss":0.01253,"percentile":0.68566}],"urls":["https://bitbucket.org/snakeyaml/snakeyaml/issues/526/stackoverflow-oss-fuzz-47027","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47027","https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html","https://security.gentoo.org/glsa/202305-28","https://security.netapp.com/advisory/ntap-20240315-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-38750","description":"Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow."}]},{"artifact":{"id":"cbeb1ac80586032b","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.9-1ubuntu0.6:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.2.9-1ubuntu0.6?arch=amd64&distro=ubuntu-20.04&upstream=expat","type":"deb","version":"2.2.9-1ubuntu0.6","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-59375","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"expat","version":"2.2.9-1ubuntu0.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-59375","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-59375","cwe":"CWE-770","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-59375","date":"2026-10-08","epss":0.01315,"percentile":0.69879}],"risk":0.6575,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-59375"},"relatedVulnerabilities":[{"id":"CVE-2025-59375","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-59375","cwe":"CWE-770","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2025-59375","date":"2026-10-08","epss":0.01315,"percentile":0.69879}],"urls":["https://github.com/libexpat/libexpat/blob/676a4c531ec768732fac215da9730b5f50fbd2bf/expat/Changes#L45-L74","https://github.com/libexpat/libexpat/blob/R_2_7_2/expat/Changes","https://github.com/libexpat/libexpat/issues/1018","https://github.com/libexpat/libexpat/pull/1034","https://issues.oss-fuzz.com/issues/439133977","http://www.openwall.com/lists/oss-security/2025/09/16/2","http://www.openwall.com/lists/oss-security/2026/05/01/5","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-089022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-59375","description":"libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing."}]},{"artifact":{"id":"13af271413a70cfc","cpes":["cpe:2.3:a:logback-classic:logback-classic:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:logback-classic:logback_classic:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:logback_classic:logback-classic:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:logback_classic:logback_classic:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:logback:logback-classic:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:logback:logback_classic:1.2.11:*:*:*:*:*:*:*"],"name":"logback-classic","purl":"pkg:maven/ch.qos.logback/logback-classic@1.2.11","type":"java-archive","version":"1.2.11","language":"java","licenses":["http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"],"metadata":{"pomGroupID":"ch.qos.logback","virtualPath":"/usr/lib/unifi/lib/logback-classic-1.2.11.jar","manifestName":"","pomArtifactID":"logback-classic","archiveDigests":[{"value":"4741689214e9d1e8408b206506cbe76d1c6a7d60","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/logback-classic-1.2.11.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/logback-classic-1.2.11.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.2.13"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vmq6-5m68-f53m","versionConstraint":"<1.2.13 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"ch.qos.logback:logback-classic","version":"1.2.11"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-vmq6-5m68-f53m","fix":{"state":"fixed","versions":["1.2.13"],"available":[{"date":"2023-12-06","kind":"first-observed","version":"1.2.13"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6378","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6378","date":"2026-10-08","epss":0.009,"percentile":0.58407}],"risk":0.6569999999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-6378","https://logback.qos.ch/news.html#1.3.12","https://github.com/qos-ch/logback/commit/9c782b45be4abdafb7e17481e24e7354c2acd1eb","https://github.com/qos-ch/logback/commit/b8eac23a9de9e05fb6d51160b3f46acd91af9731","https://logback.qos.ch/manual/receivers.html","https://github.com/qos-ch/logback/issues/745#issuecomment-1836227158","https://github.com/qos-ch/logback/commit/bb095154be011267b64e37a1d401546e7cc2b7c3","https://logback.qos.ch/news.html#1.2.13","https://security.netapp.com/advisory/ntap-20241129-0012"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vmq6-5m68-f53m","description":"logback serialization vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2023-6378","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"vulnerability@ncsc.ch","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6378","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6378","date":"2026-10-08","epss":0.009,"percentile":0.58407}],"urls":["https://logback.qos.ch/news.html#1.3.12","https://security.netapp.com/advisory/ntap-20241129-0012/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6378","description":"A serialization vulnerability in logback receiver component part of \nlogback version 1.4.11 allows an attacker to mount a Denial-Of-Service \nattack by sending poisoned data."}]},{"artifact":{"id":"d7981bbf5b5669aa","cpes":["cpe:2.3:a:logback-core:logback-core:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:logback-core:logback_core:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:logback_core:logback-core:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:logback_core:logback_core:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:logback:logback-core:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:logback:logback_core:1.2.11:*:*:*:*:*:*:*"],"name":"logback-core","purl":"pkg:maven/ch.qos.logback/logback-core@1.2.11","type":"java-archive","version":"1.2.11","language":"java","licenses":["http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"],"metadata":{"pomGroupID":"ch.qos.logback","virtualPath":"/usr/lib/unifi/lib/logback-core-1.2.11.jar","manifestName":"","pomArtifactID":"logback-core","archiveDigests":[{"value":"a01230df5ca5c34540cdaa3ad5efb012f1f1f792","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/logback-core-1.2.11.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/logback-core-1.2.11.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.2.13"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vmq6-5m68-f53m","versionConstraint":"<1.2.13 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"ch.qos.logback:logback-core","version":"1.2.11"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-vmq6-5m68-f53m","fix":{"state":"fixed","versions":["1.2.13"],"available":[{"date":"2023-12-06","kind":"first-observed","version":"1.2.13"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6378","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6378","date":"2026-10-08","epss":0.009,"percentile":0.58407}],"risk":0.6569999999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-6378","https://logback.qos.ch/news.html#1.3.12","https://github.com/qos-ch/logback/commit/9c782b45be4abdafb7e17481e24e7354c2acd1eb","https://github.com/qos-ch/logback/commit/b8eac23a9de9e05fb6d51160b3f46acd91af9731","https://logback.qos.ch/manual/receivers.html","https://github.com/qos-ch/logback/issues/745#issuecomment-1836227158","https://github.com/qos-ch/logback/commit/bb095154be011267b64e37a1d401546e7cc2b7c3","https://logback.qos.ch/news.html#1.2.13","https://security.netapp.com/advisory/ntap-20241129-0012"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vmq6-5m68-f53m","description":"logback serialization vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2023-6378","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"vulnerability@ncsc.ch","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":4,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6378","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6378","date":"2026-10-08","epss":0.009,"percentile":0.58407}],"urls":["https://logback.qos.ch/news.html#1.3.12","https://security.netapp.com/advisory/ntap-20241129-0012/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6378","description":"A serialization vulnerability in logback receiver component part of \nlogback version 1.4.11 allows an attacker to mount a Denial-Of-Service \nattack by sending poisoned data."}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.16"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33599","versionConstraint":"< 2.31-0ubuntu9.16 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-33599","fix":{"state":"fixed","versions":["2.31-0ubuntu9.16"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.31-0ubuntu9.16"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-08","epss":0.0131,"percentile":0.69775}],"risk":0.655,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33599"},"relatedVulnerabilities":[{"id":"CVE-2024-33599","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-08","epss":0.0131,"percentile":0.69775}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0011/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33599","description":"nscd: Stack-based buffer overflow in netgroup cache\n\nIf the Name Service Cache Daemon's (nscd) fixed size cache is exhausted\nby client requests then a subsequent client request for netgroup data\nmay result in a stack-based buffer overflow.  This flaw was introduced\nin glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.16"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33599","versionConstraint":"< 2.31-0ubuntu9.16 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-33599","fix":{"state":"fixed","versions":["2.31-0ubuntu9.16"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.31-0ubuntu9.16"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-08","epss":0.0131,"percentile":0.69775}],"risk":0.655,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33599"},"relatedVulnerabilities":[{"id":"CVE-2024-33599","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-08","epss":0.0131,"percentile":0.69775}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0011/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33599","description":"nscd: Stack-based buffer overflow in netgroup cache\n\nIf the Name Service Cache Daemon's (nscd) fixed size cache is exhausted\nby client requests then a subsequent client request for netgroup data\nmay result in a stack-based buffer overflow.  This flaw was introduced\nin glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"b082b70df3e54e06","cpes":["cpe:2.3:a:locales:locales:2.31-0ubuntu9.14:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.31-0ubuntu9.14?arch=all&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.14","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.16"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33599","versionConstraint":"< 2.31-0ubuntu9.16 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.14"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-33599","fix":{"state":"fixed","versions":["2.31-0ubuntu9.16"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.31-0ubuntu9.16"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-08","epss":0.0131,"percentile":0.69775}],"risk":0.655,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33599"},"relatedVulnerabilities":[{"id":"CVE-2024-33599","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2024-33599","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-33599","date":"2026-10-08","epss":0.0131,"percentile":0.69775}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0011/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0005","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33599","description":"nscd: Stack-based buffer overflow in netgroup cache\n\nIf the Name Service Cache Daemon's (nscd) fixed size cache is exhausted\nby client requests then a subsequent client request for netgroup data\nmay result in a stack-based buffer overflow.  This flaw was introduced\nin glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-7929","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2020-7929","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-7929","cwe":"CWE-185","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7929","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7929","date":"2026-10-08","epss":0.013,"percentile":0.69583}],"risk":0.65,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2020-7929"},"relatedVulnerabilities":[{"id":"CVE-2020-7929","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7929","cwe":"CWE-185","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7929","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7929","date":"2026-10-08","epss":0.013,"percentile":0.69583}],"urls":["https://jira.mongodb.org/browse/SERVER-51083"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7929","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This issue affects MongoDB Server v3.6 versions prior to 3.6.21 and MongoDB Server v4.0 versions prior to 4.0.20."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-7929","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2020-7929","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-7929","cwe":"CWE-185","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7929","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7929","date":"2026-10-08","epss":0.013,"percentile":0.69583}],"risk":0.65,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2020-7929"},"relatedVulnerabilities":[{"id":"CVE-2020-7929","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7929","cwe":"CWE-185","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7929","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7929","date":"2026-10-08","epss":0.013,"percentile":0.69583}],"urls":["https://jira.mongodb.org/browse/SERVER-51083"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7929","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This issue affects MongoDB Server v3.6 versions prior to 3.6.21 and MongoDB Server v4.0 versions prior to 4.0.20."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-7929","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2020-7929","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-7929","cwe":"CWE-185","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7929","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7929","date":"2026-10-08","epss":0.013,"percentile":0.69583}],"risk":0.65,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2020-7929"},"relatedVulnerabilities":[{"id":"CVE-2020-7929","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7929","cwe":"CWE-185","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7929","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7929","date":"2026-10-08","epss":0.013,"percentile":0.69583}],"urls":["https://jira.mongodb.org/browse/SERVER-51083"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7929","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This issue affects MongoDB Server v3.6 versions prior to 3.6.21 and MongoDB Server v4.0 versions prior to 4.0.20."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.11+9-1~20.04.2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-21068","versionConstraint":"< 17.0.11+9-1~20.04.2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-21068","fix":{"state":"fixed","versions":["17.0.11+9-1~20.04.2"],"available":[{"date":"2024-06-06","kind":"advisory","version":"17.0.11+9-1~20.04.2"}]},"cvss":[],"epss":[{"cve":"CVE-2024-21068","date":"2026-10-08","epss":0.013,"percentile":0.6958}],"risk":0.65,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-21068"},"relatedVulnerabilities":[{"id":"CVE-2024-21068","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-21068","date":"2026-10-08","epss":0.013,"percentile":0.6958}],"urls":["https://lists.debian.org/debian-lts-announce/2024/04/msg00014.html","https://security.netapp.com/advisory/ntap-20240426-0004/","https://www.oracle.com/security-alerts/cpuapr2024.html","https://openjdk.org/groups/vulnerability/advisories/2024-04-16"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21068","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.118"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-gx5v-xp9w-j4cg","versionConstraint":"<9.0.118 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-gx5v-xp9w-j4cg","fix":{"state":"fixed","versions":["9.0.118"],"available":[{"date":"2026-05-19","kind":"first-observed","version":"9.0.118"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41284","cwe":"CWE-770","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-41284","date":"2026-10-08","epss":0.00864,"percentile":0.57355}],"risk":0.6479999999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-41284","https://lists.apache.org/thread/2nvqjr7ovjmvx2vbhb7s61ycd5msc8qc","http://www.openwall.com/lists/oss-security/2026/05/12/12","https://github.com/apache/tomcat/commit/17dacd9aa48628da2eba37a9ab743c0b6c71685c","https://github.com/apache/tomcat/commit/a96fffd18487a29c0a30d36f00cb2b2d91f6d42c","https://github.com/apache/tomcat/commit/b3d1c1c239142e806be0b7329d304b94a58913ed","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-gx5v-xp9w-j4cg","description":"Apache Tomcat: Unbounded read in WebDAV LOCK and  PROPFIND handling"},"relatedVulnerabilities":[{"id":"CVE-2026-41284","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41284","cwe":"CWE-770","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-41284","date":"2026-10-08","epss":0.00864,"percentile":0.57355}],"urls":["https://lists.apache.org/thread/2nvqjr7ovjmvx2vbhb7s61ycd5msc8qc","http://www.openwall.com/lists/oss-security/2026/05/12/12"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-41284","description":"Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117.\nOlder, unsupported versions may also be affected.\n\nUsers are recommended to upgrade to version [FIXED_VERSION], which fixes the issue."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.6.13-2ubuntu1.12"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-12243","versionConstraint":"< 3.6.13-2ubuntu1.12 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-12243","fix":{"state":"fixed","versions":["3.6.13-2ubuntu1.12"],"available":[{"date":"2025-02-20","kind":"advisory","version":"3.6.13-2ubuntu1.12"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-12243","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-12243","date":"2026-10-08","epss":0.01292,"percentile":0.69398}],"risk":0.6459999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-12243"},"relatedVulnerabilities":[{"id":"CVE-2024-12243","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-12243","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-12243","date":"2026-10-08","epss":0.01292,"percentile":0.69398}],"urls":["https://access.redhat.com/errata/RHSA-2025:17361","https://access.redhat.com/errata/RHSA-2025:4051","https://access.redhat.com/errata/RHSA-2025:7076","https://access.redhat.com/errata/RHSA-2025:8020","https://access.redhat.com/errata/RHSA-2025:8385","https://access.redhat.com/security/cve/CVE-2024-12243","https://bugzilla.redhat.com/show_bug.cgi?id=2344615","https://gitlab.com/gnutls/gnutls/-/issues/1553","https://gitlab.com/gnutls/libtasn1/-/issues/52","https://lists.debian.org/debian-lts-announce/2025/02/msg00027.html","https://security.netapp.com/advisory/ntap-20250523-0002/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-12243","description":"A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-7923","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2020-7923","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-7923","cwe":"CWE-755","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7923","cwe":"CWE-755","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7923","date":"2026-10-08","epss":0.01286,"percentile":0.69278}],"risk":0.643,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2020-7923"},"relatedVulnerabilities":[{"id":"CVE-2020-7923","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7923","cwe":"CWE-755","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7923","cwe":"CWE-755","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7923","date":"2026-10-08","epss":0.01286,"percentile":0.69278}],"urls":["https://jira.mongodb.org/browse/SERVER-47773"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7923","description":"A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-7923","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2020-7923","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-7923","cwe":"CWE-755","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7923","cwe":"CWE-755","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7923","date":"2026-10-08","epss":0.01286,"percentile":0.69278}],"risk":0.643,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2020-7923"},"relatedVulnerabilities":[{"id":"CVE-2020-7923","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7923","cwe":"CWE-755","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7923","cwe":"CWE-755","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7923","date":"2026-10-08","epss":0.01286,"percentile":0.69278}],"urls":["https://jira.mongodb.org/browse/SERVER-47773"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7923","description":"A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-7923","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2020-7923","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-7923","cwe":"CWE-755","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7923","cwe":"CWE-755","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7923","date":"2026-10-08","epss":0.01286,"percentile":0.69278}],"risk":0.643,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2020-7923"},"relatedVulnerabilities":[{"id":"CVE-2020-7923","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7923","cwe":"CWE-755","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7923","cwe":"CWE-755","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7923","date":"2026-10-08","epss":0.01286,"percentile":0.69278}],"urls":["https://jira.mongodb.org/browse/SERVER-47773"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7923","description":"A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant in the query subsystem's support for geoNear. This issue affects MongoDB Server v4.4 versions prior to 4.4.0-rc7; MongoDB Server v4.2 versions prior to 4.2.8 and MongoDB Server v4.0 versions prior to 4.0.19."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-20333","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2021-20333","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-20333","cwe":"CWE-117","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-20333","cwe":"CWE-116","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-20333","date":"2026-10-08","epss":0.01283,"percentile":0.69224}],"risk":0.6415,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-20333"},"relatedVulnerabilities":[{"id":"CVE-2021-20333","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-20333","cwe":"CWE-117","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-20333","cwe":"CWE-116","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-20333","date":"2026-10-08","epss":0.01283,"percentile":0.69224}],"urls":["https://jira.mongodb.org/browse/SERVER-50605"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-20333","description":"Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. This issue affects MongoDB Server v3.6 versions prior to 3.6.20; MongoDB Server v4.0 versions prior to 4.0.21 and MongoDB Server v4.2 versions prior to 4.2.10."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-20333","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2021-20333","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-20333","cwe":"CWE-117","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-20333","cwe":"CWE-116","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-20333","date":"2026-10-08","epss":0.01283,"percentile":0.69224}],"risk":0.6415,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-20333"},"relatedVulnerabilities":[{"id":"CVE-2021-20333","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-20333","cwe":"CWE-117","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-20333","cwe":"CWE-116","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-20333","date":"2026-10-08","epss":0.01283,"percentile":0.69224}],"urls":["https://jira.mongodb.org/browse/SERVER-50605"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-20333","description":"Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. This issue affects MongoDB Server v3.6 versions prior to 3.6.20; MongoDB Server v4.0 versions prior to 4.0.21 and MongoDB Server v4.2 versions prior to 4.2.10."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-20333","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2021-20333","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-20333","cwe":"CWE-117","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-20333","cwe":"CWE-116","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-20333","date":"2026-10-08","epss":0.01283,"percentile":0.69224}],"risk":0.6415,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-20333"},"relatedVulnerabilities":[{"id":"CVE-2021-20333","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-20333","cwe":"CWE-117","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-20333","cwe":"CWE-116","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-20333","date":"2026-10-08","epss":0.01283,"percentile":0.69224}],"urls":["https://jira.mongodb.org/browse/SERVER-50605"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-20333","description":"Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. This issue affects MongoDB Server v3.6 versions prior to 3.6.20; MongoDB Server v4.0 versions prior to 4.0.21 and MongoDB Server v4.2 versions prior to 4.2.10."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.6.13-2ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5981","versionConstraint":"< 3.6.13-2ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-5981","fix":{"state":"fixed","versions":["3.6.13-2ubuntu1.9"],"available":[{"date":"2023-11-21","kind":"advisory","version":"3.6.13-2ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-5981","cwe":"CWE-208","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5981","cwe":"CWE-203","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5981","date":"2026-10-08","epss":0.01267,"percentile":0.68897}],"risk":0.6335000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-5981"},"relatedVulnerabilities":[{"id":"CVE-2023-5981","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5981","cwe":"CWE-208","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-5981","cwe":"CWE-203","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5981","date":"2026-10-08","epss":0.01267,"percentile":0.68897}],"urls":["https://access.redhat.com/errata/RHSA-2024:0155","https://access.redhat.com/errata/RHSA-2024:0319","https://access.redhat.com/errata/RHSA-2024:0399","https://access.redhat.com/errata/RHSA-2024:0451","https://access.redhat.com/errata/RHSA-2024:0533","https://access.redhat.com/errata/RHSA-2024:1383","https://access.redhat.com/errata/RHSA-2024:2094","https://access.redhat.com/security/cve/CVE-2023-5981","https://bugzilla.redhat.com/show_bug.cgi?id=2248445","https://gnutls.org/security-new.html#GNUTLS-SA-2023-10-23","http://www.openwall.com/lists/oss-security/2024/01/19/3","https://lists.debian.org/debian-lts-announce/2023/11/msg00016.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZEIOLORQ7N6WRPFXZSYDL2MC4LP7VFV/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXKVR5YNUEBNHAHM5GSYKBZX4W2HMN2/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5981","description":"A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-2392","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-2392","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-2392","cwe":"CWE-190","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2019-2392","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-2392","date":"2026-10-08","epss":0.01261,"percentile":0.68749}],"risk":0.6305,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-2392"},"relatedVulnerabilities":[{"id":"CVE-2019-2392","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-2392","cwe":"CWE-190","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2019-2392","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-2392","date":"2026-10-08","epss":0.01261,"percentile":0.68749}],"urls":["https://jira.mongodb.org/browse/SERVER-43699"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-2392","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prior to 4.0.20; v3.6 versions prior to 3.6.20."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-2392","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-2392","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-2392","cwe":"CWE-190","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2019-2392","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-2392","date":"2026-10-08","epss":0.01261,"percentile":0.68749}],"risk":0.6305,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-2392"},"relatedVulnerabilities":[{"id":"CVE-2019-2392","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-2392","cwe":"CWE-190","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2019-2392","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-2392","date":"2026-10-08","epss":0.01261,"percentile":0.68749}],"urls":["https://jira.mongodb.org/browse/SERVER-43699"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-2392","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prior to 4.0.20; v3.6 versions prior to 3.6.20."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-2392","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-2392","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-2392","cwe":"CWE-190","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2019-2392","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-2392","date":"2026-10-08","epss":0.01261,"percentile":0.68749}],"risk":0.6305,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-2392"},"relatedVulnerabilities":[{"id":"CVE-2019-2392","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-2392","cwe":"CWE-190","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2019-2392","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-2392","date":"2026-10-08","epss":0.01261,"percentile":0.68749}],"urls":["https://jira.mongodb.org/browse/SERVER-43699"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-2392","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prior to 4.0.20; v3.6 versions prior to 3.6.20."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.12+7-1ubuntu2~20.04"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-21138","versionConstraint":"< 17.0.12+7-1ubuntu2~20.04 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-21138","fix":{"state":"fixed","versions":["17.0.12+7-1ubuntu2~20.04"],"available":[{"date":"2024-07-31","kind":"advisory","version":"17.0.12+7-1ubuntu2~20.04"}]},"cvss":[],"epss":[{"cve":"CVE-2024-21138","date":"2026-10-08","epss":0.01257,"percentile":0.68668}],"risk":0.6285,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-21138"},"relatedVulnerabilities":[{"id":"CVE-2024-21138","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-21138","date":"2026-10-08","epss":0.01257,"percentile":0.68668}],"urls":["https://security.netapp.com/advisory/ntap-20240719-0008/","https://www.oracle.com/security-alerts/cpujul2024.html","https://openjdk.org/groups/vulnerability/advisories/2024-07-16"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21138","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"c9a07c3b9df49ddb","cpes":["cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0-0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*"],"name":"libglib2.0-0","purl":"pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.6?arch=amd64&distro=ubuntu-20.04&upstream=glib2.0","type":"deb","version":"2.64.6-1~ubuntu20.04.6","language":"","licenses":["sha256:f65e92234e97932114d94d72fc898fcddc854345f77caae80af26ad5cd94cce8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libglib2.0-0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libglib2.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glib2.0"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.64.6-1~ubuntu20.04.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-52533","versionConstraint":"< 2.64.6-1~ubuntu20.04.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glib2.0","version":"2.64.6-1~ubuntu20.04.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-52533","fix":{"state":"fixed","versions":["2.64.6-1~ubuntu20.04.8"],"available":[{"date":"2024-11-18","kind":"advisory","version":"2.64.6-1~ubuntu20.04.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-52533","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-52533","date":"2026-10-08","epss":0.01254,"percentile":0.68585}],"risk":0.627,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-52533"},"relatedVulnerabilities":[{"id":"CVE-2024-52533","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-52533","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-52533","date":"2026-10-08","epss":0.01254,"percentile":0.68585}],"urls":["https://gitlab.gnome.org/GNOME/glib/-/issues/3461","https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.1","https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home","http://www.openwall.com/lists/oss-security/2024/11/12/11","https://lists.debian.org/debian-lts-announce/2024/11/msg00020.html","https://security.netapp.com/advisory/ntap-20241206-0009/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-52533","description":"gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\\0' character."}]},{"artifact":{"id":"f09b2a4cc479262d","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:core:2.13.3:*:*:*:*:*:*:*"],"name":"jackson-core","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3","type":"java-archive","version":"2.13.3","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/lib/unifi/lib/jackson-core-2.13.3.jar","manifestName":"","pomArtifactID":"jackson-core","archiveDigests":[{"value":"a27014716e4421684416e5fa83d896ddb87002da","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/jackson-core-2.13.3.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/jackson-core-2.13.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.15.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h46c-h94j-95f3","versionConstraint":"<2.15.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-core","version":"2.13.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-h46c-h94j-95f3","fix":{"state":"fixed","versions":["2.15.0"],"available":[{"date":"2025-06-28","kind":"first-observed","version":"2.15.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52999","cwe":"CWE-121","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-52999","date":"2026-10-08","epss":0.00772,"percentile":0.54292}],"risk":0.62532,"urls":["https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3","https://nvd.nist.gov/vuln/detail/CVE-2025-52999","https://github.com/FasterXML/jackson-core/pull/943"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h46c-h94j-95f3","description":"jackson-core can throw a StackoverflowError when processing deeply nested data"},"relatedVulnerabilities":[{"id":"CVE-2025-52999","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-52999","cwe":"CWE-121","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-52999","date":"2026-10-08","epss":0.00772,"percentile":0.54292}],"urls":["https://github.com/FasterXML/jackson-core/pull/943","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-52999","description":"jackson-core contains core low-level incremental (\"streaming\") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources."}]},{"artifact":{"id":"55fa295b7d86df9a","cpes":["cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.31.1-4ubuntu0.5:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-0:libsqlite3_0:3.31.1-4ubuntu0.5:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3-0:3.31.1-4ubuntu0.5:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3_0:3.31.1-4ubuntu0.5:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-0:3.31.1-4ubuntu0.5:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_0:3.31.1-4ubuntu0.5:*:*:*:*:*:*:*"],"name":"libsqlite3-0","purl":"pkg:deb/ubuntu/libsqlite3-0@3.31.1-4ubuntu0.5?arch=amd64&distro=ubuntu-20.04&upstream=sqlite3","type":"deb","version":"3.31.1-4ubuntu0.5","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-0/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libsqlite3-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.31.1-4ubuntu0.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-7104","versionConstraint":"< 3.31.1-4ubuntu0.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"sqlite3","version":"3.31.1-4ubuntu0.5"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-7104","fix":{"state":"fixed","versions":["3.31.1-4ubuntu0.6"],"available":[{"date":"2024-01-03","kind":"advisory","version":"3.31.1-4ubuntu0.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-7104","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2023-7104","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-7104","date":"2026-10-08","epss":0.01249,"percentile":0.68483}],"risk":0.6244999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-7104"},"relatedVulnerabilities":[{"id":"CVE-2023-7104","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.5,"impactScore":3.4,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":5.2,"impactScore":6.5,"exploitabilityScore":5.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-7104","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2023-7104","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-7104","date":"2026-10-08","epss":0.01249,"percentile":0.68483}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/","https://security.netapp.com/advisory/ntap-20240112-0008/","https://sqlite.org/forum/forumpost/5bcbf4571c","https://sqlite.org/src/info/0e4e7a05c4204b47","https://vuldb.com/?ctiid.248999","https://vuldb.com/?id.248999","https://lists.debian.org/debian-lts-announce/2024/09/msg00050.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-7104","description":"A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20805","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-20805","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20805","cwe":"CWE-834","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20805","cwe":"CWE-834","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20805","date":"2026-10-08","epss":0.01249,"percentile":0.68466}],"risk":0.6244999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-20805"},"relatedVulnerabilities":[{"id":"CVE-2018-20805","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20805","cwe":"CWE-834","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20805","cwe":"CWE-834","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20805","date":"2026-10-08","epss":0.01249,"percentile":0.68466}],"urls":["https://jira.mongodb.org/browse/SERVER-38164"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20805","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch . This issue affects MongoDB Server v4.0 versions prior to 4.0.5 and MongoDB Server v3.6 versions prior to 3.6.10."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20805","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-20805","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20805","cwe":"CWE-834","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20805","cwe":"CWE-834","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20805","date":"2026-10-08","epss":0.01249,"percentile":0.68466}],"risk":0.6244999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-20805"},"relatedVulnerabilities":[{"id":"CVE-2018-20805","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20805","cwe":"CWE-834","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20805","cwe":"CWE-834","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20805","date":"2026-10-08","epss":0.01249,"percentile":0.68466}],"urls":["https://jira.mongodb.org/browse/SERVER-38164"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20805","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch . This issue affects MongoDB Server v4.0 versions prior to 4.0.5 and MongoDB Server v3.6 versions prior to 3.6.10."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20805","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-20805","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20805","cwe":"CWE-834","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20805","cwe":"CWE-834","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20805","date":"2026-10-08","epss":0.01249,"percentile":0.68466}],"risk":0.6244999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-20805"},"relatedVulnerabilities":[{"id":"CVE-2018-20805","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20805","cwe":"CWE-834","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20805","cwe":"CWE-834","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20805","date":"2026-10-08","epss":0.01249,"percentile":0.68466}],"urls":["https://jira.mongodb.org/browse/SERVER-38164"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20805","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which perform an $elemMatch . This issue affects MongoDB Server v4.0 versions prior to 4.0.5 and MongoDB Server v3.6 versions prior to 3.6.10."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20804","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-20804","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20804","cwe":"CWE-20","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20804","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20804","date":"2026-10-08","epss":0.01249,"percentile":0.68465}],"risk":0.6244999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-20804"},"relatedVulnerabilities":[{"id":"CVE-2018-20804","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20804","cwe":"CWE-20","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20804","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20804","date":"2026-10-08","epss":0.01249,"percentile":0.68465}],"urls":["https://jira.mongodb.org/browse/SERVER-35636"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20804","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-2393","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-2393","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-2393","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2019-2393","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-2393","date":"2026-10-08","epss":0.01249,"percentile":0.68465}],"risk":0.6244999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-2393"},"relatedVulnerabilities":[{"id":"CVE-2019-2393","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-2393","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2019-2393","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-2393","date":"2026-10-08","epss":0.01249,"percentile":0.68465}],"urls":["https://jira.mongodb.org/browse/SERVER-43350"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-2393","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior to 3.6.15."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20804","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-20804","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20804","cwe":"CWE-20","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20804","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20804","date":"2026-10-08","epss":0.01249,"percentile":0.68465}],"risk":0.6244999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-20804"},"relatedVulnerabilities":[{"id":"CVE-2018-20804","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20804","cwe":"CWE-20","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20804","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20804","date":"2026-10-08","epss":0.01249,"percentile":0.68465}],"urls":["https://jira.mongodb.org/browse/SERVER-35636"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20804","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-2393","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-2393","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-2393","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2019-2393","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-2393","date":"2026-10-08","epss":0.01249,"percentile":0.68465}],"risk":0.6244999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-2393"},"relatedVulnerabilities":[{"id":"CVE-2019-2393","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-2393","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2019-2393","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-2393","date":"2026-10-08","epss":0.01249,"percentile":0.68465}],"urls":["https://jira.mongodb.org/browse/SERVER-43350"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-2393","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior to 3.6.15."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20804","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-20804","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20804","cwe":"CWE-20","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20804","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20804","date":"2026-10-08","epss":0.01249,"percentile":0.68465}],"risk":0.6244999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-20804"},"relatedVulnerabilities":[{"id":"CVE-2018-20804","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20804","cwe":"CWE-20","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-20804","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20804","date":"2026-10-08","epss":0.01249,"percentile":0.68465}],"urls":["https://jira.mongodb.org/browse/SERVER-35636"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20804","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-2393","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-2393","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-2393","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2019-2393","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-2393","date":"2026-10-08","epss":0.01249,"percentile":0.68465}],"risk":0.6244999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-2393"},"relatedVulnerabilities":[{"id":"CVE-2019-2393","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-2393","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2019-2393","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-2393","date":"2026-10-08","epss":0.01249,"percentile":0.68465}],"urls":["https://jira.mongodb.org/browse/SERVER-43350"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-2393","description":"A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use $lookup and collations. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13 and MongoDB Server v3.6 versions prior to 3.6.15."}]},{"artifact":{"id":"3fb3b4642e243e5c","cpes":["cpe:2.3:a:libsystemd0:libsystemd0:245.4-4ubuntu3.22:*:*:*:*:*:*:*"],"name":"libsystemd0","purl":"pkg:deb/ubuntu/libsystemd0@245.4-4ubuntu3.22?arch=amd64&distro=ubuntu-20.04&upstream=systemd","type":"deb","version":"245.4-4ubuntu3.22","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsystemd0/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libsystemd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4598","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"systemd","version":"245.4-4ubuntu3.22"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-4598","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-4598","cwe":"CWE-364","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4598","date":"2026-10-08","epss":0.01233,"percentile":0.68108}],"risk":0.6165,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-4598"},"relatedVulnerabilities":[{"id":"CVE-2025-4598","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4598","cwe":"CWE-364","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4598","date":"2026-10-08","epss":0.01233,"percentile":0.68108}],"urls":["https://access.redhat.com/errata/RHSA-2025:22660","https://access.redhat.com/errata/RHSA-2025:22868","https://access.redhat.com/errata/RHSA-2025:23227","https://access.redhat.com/errata/RHSA-2025:23234","https://access.redhat.com/errata/RHSA-2026:0414","https://access.redhat.com/errata/RHSA-2026:1652","https://access.redhat.com/errata/RHSA-2026:18153","https://access.redhat.com/security/cve/CVE-2025-4598","https://bugzilla.redhat.com/show_bug.cgi?id=2369242","https://www.openwall.com/lists/oss-security/2025/05/29/3","http://seclists.org/fulldisclosure/2025/Jun/9","http://www.openwall.com/lists/oss-security/2025/06/05/1","http://www.openwall.com/lists/oss-security/2025/06/05/3","http://www.openwall.com/lists/oss-security/2025/08/18/3","https://blogs.oracle.com/linux/post/analysis-of-cve-2025-4598","https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598/","https://lists.debian.org/debian-lts-announce/2025/07/msg00022.html","https://www.openwall.com/lists/oss-security/2025/08/18/3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4598","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality."}]},{"artifact":{"id":"684edf6ead540df1","cpes":["cpe:2.3:a:libudev1:libudev1:245.4-4ubuntu3.22:*:*:*:*:*:*:*"],"name":"libudev1","purl":"pkg:deb/ubuntu/libudev1@245.4-4ubuntu3.22?arch=amd64&distro=ubuntu-20.04&upstream=systemd","type":"deb","version":"245.4-4ubuntu3.22","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libudev1/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libudev1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libudev1:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libudev1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4598","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"systemd","version":"245.4-4ubuntu3.22"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-4598","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-4598","cwe":"CWE-364","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4598","date":"2026-10-08","epss":0.01233,"percentile":0.68108}],"risk":0.6165,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-4598"},"relatedVulnerabilities":[{"id":"CVE-2025-4598","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4598","cwe":"CWE-364","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4598","date":"2026-10-08","epss":0.01233,"percentile":0.68108}],"urls":["https://access.redhat.com/errata/RHSA-2025:22660","https://access.redhat.com/errata/RHSA-2025:22868","https://access.redhat.com/errata/RHSA-2025:23227","https://access.redhat.com/errata/RHSA-2025:23234","https://access.redhat.com/errata/RHSA-2026:0414","https://access.redhat.com/errata/RHSA-2026:1652","https://access.redhat.com/errata/RHSA-2026:18153","https://access.redhat.com/security/cve/CVE-2025-4598","https://bugzilla.redhat.com/show_bug.cgi?id=2369242","https://www.openwall.com/lists/oss-security/2025/05/29/3","http://seclists.org/fulldisclosure/2025/Jun/9","http://www.openwall.com/lists/oss-security/2025/06/05/1","http://www.openwall.com/lists/oss-security/2025/06/05/3","http://www.openwall.com/lists/oss-security/2025/08/18/3","https://blogs.oracle.com/linux/post/analysis-of-cve-2025-4598","https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598/","https://lists.debian.org/debian-lts-announce/2025/07/msg00022.html","https://www.openwall.com/lists/oss-security/2025/08/18/3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4598","description":"A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality."}]},{"artifact":{"id":"75f53734df5b814d","cpes":["cpe:2.3:a:com.google.protobuf:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.protobuf:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.protobuf:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf:3.6.0:*:*:*:*:*:*:*"],"name":"protobuf-java","purl":"pkg:maven/com.google.protobuf/protobuf-java@3.6.0","type":"java-archive","version":"3.6.0","language":"java","licenses":["https://opensource.org/licenses/BSD-3-Clause"],"metadata":{"pomGroupID":"com.google.protobuf","virtualPath":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","manifestName":"","pomArtifactID":"protobuf-java","archiveDigests":[{"value":"5333f7e422744d76840c08a106e28e519fbe3acd","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.16.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h4h5-3hr4-j3g2","versionConstraint":"<3.16.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.google.protobuf:protobuf-java","version":"3.6.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-h4h5-3hr4-j3g2","fix":{"state":"fixed","versions":["3.16.3"],"available":[{"date":"2022-10-06","kind":"first-observed","version":"3.16.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.7,"impactScore":3.6,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3171","cwe":"CWE-20","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2022-3171","date":"2026-10-08","epss":0.01143,"percentile":0.65703}],"risk":0.6115050000000001,"urls":["https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48771","https://github.com/protocolbuffers/protobuf/releases/tag/v21.7","https://github.com/protocolbuffers/protobuf/releases/tag/v3.16.3","https://github.com/protocolbuffers/protobuf/releases/tag/v3.19.6","https://github.com/protocolbuffers/protobuf/releases/tag/v3.20.3","https://nvd.nist.gov/vuln/detail/CVE-2022-3171","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/google-protobuf/CVE-2022-3171.yml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CBAUKJQL6O4TIWYBENORSY5P43TVB4M3/","https://security.gentoo.org/glsa/202301-09","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MPCGUT3T5L6C3IDWUPSUO22QDCGQKTOP/"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h4h5-3hr4-j3g2","description":"protobuf-java has a potential Denial of Service issue"},"relatedVulnerabilities":[{"id":"CVE-2022-3171","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3171","cwe":"CWE-20","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2022-3171","date":"2026-10-08","epss":0.01143,"percentile":0.65703}],"urls":["https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBAUKJQL6O4TIWYBENORSY5P43TVB4M3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MPCGUT3T5L6C3IDWUPSUO22QDCGQKTOP/","https://security.gentoo.org/glsa/202301-09"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3171","description":"A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above."}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.16"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33600","versionConstraint":"< 2.31-0ubuntu9.16 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-33600","fix":{"state":"fixed","versions":["2.31-0ubuntu9.16"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.31-0ubuntu9.16"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-08","epss":0.01216,"percentile":0.67686}],"risk":0.608,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33600"},"relatedVulnerabilities":[{"id":"CVE-2024-33600","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-08","epss":0.01216,"percentile":0.67686}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0013/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33600","description":"nscd: Null pointer crashes after notfound response\n\nIf the Name Service Cache Daemon's (nscd) cache fails to add a not-found\nnetgroup response to the cache, the client request can result in a null\npointer dereference.  This flaw was introduced in glibc 2.15 when the\ncache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.16"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33600","versionConstraint":"< 2.31-0ubuntu9.16 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-33600","fix":{"state":"fixed","versions":["2.31-0ubuntu9.16"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.31-0ubuntu9.16"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-08","epss":0.01216,"percentile":0.67686}],"risk":0.608,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33600"},"relatedVulnerabilities":[{"id":"CVE-2024-33600","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-08","epss":0.01216,"percentile":0.67686}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0013/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33600","description":"nscd: Null pointer crashes after notfound response\n\nIf the Name Service Cache Daemon's (nscd) cache fails to add a not-found\nnetgroup response to the cache, the client request can result in a null\npointer dereference.  This flaw was introduced in glibc 2.15 when the\ncache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"b082b70df3e54e06","cpes":["cpe:2.3:a:locales:locales:2.31-0ubuntu9.14:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.31-0ubuntu9.14?arch=all&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.14","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.16"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33600","versionConstraint":"< 2.31-0ubuntu9.16 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.14"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-33600","fix":{"state":"fixed","versions":["2.31-0ubuntu9.16"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.31-0ubuntu9.16"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-08","epss":0.01216,"percentile":0.67686}],"risk":0.608,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33600"},"relatedVulnerabilities":[{"id":"CVE-2024-33600","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33600","cwe":"CWE-476","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33600","date":"2026-10-08","epss":0.01216,"percentile":0.67686}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0013/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0006","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33600","description":"nscd: Null pointer crashes after notfound response\n\nIf the Name Service Cache Daemon's (nscd) cache fails to add a not-found\nnetgroup response to the cache, the client request can result in a null\npointer dereference.  This flaw was introduced in glibc 2.15 when the\ncache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"0ecb0928f40bd774","cpes":["cpe:2.3:a:libssh-4:libssh-4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh-4:libssh_4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh_4:libssh-4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh_4:libssh_4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh-4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh_4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*"],"name":"libssh-4","purl":"pkg:deb/ubuntu/libssh-4@0.9.3-2ubuntu2.4?arch=amd64&distro=ubuntu-20.04&upstream=libssh","type":"deb","version":"0.9.3-2ubuntu2.4","language":"","licenses":["BSD-2-clause","BSD-3-clause","LGPL-2.1","LGPL-2.1+~OpenSSL","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssh-4/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssh-4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssh-4:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssh-4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-3731","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"libssh","version":"0.9.3-2ubuntu2.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-3731","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-3731","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-3731","cwe":"CWE-125","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-3731","date":"2026-10-08","epss":0.012,"percentile":0.67273}],"risk":0.6,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-3731"},"relatedVulnerabilities":[{"id":"CVE-2026-3731","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3731","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-3731","cwe":"CWE-125","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-3731","date":"2026-10-08","epss":0.012,"percentile":0.67273}],"urls":["https://gitlab.com/libssh/libssh-mirror/-/commit/855a0853ad3abd4a6cd85ce06fce6d8d4c7a0b60","https://vuldb.com/?ctiid.349709","https://vuldb.com/?id.349709","https://vuldb.com/?submit.767120","https://www.libssh.org/files/0.12/libssh-0.12.0.tar.xz","https://www.libssh.org/security/advisories/libssh-2026-sftp-extensions.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3731","description":"A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftp_extensions_get_name/sftp_extensions_get_data of the file src/sftp.c of the component SFTP Extension Name Handler. Executing a manipulation of the argument idx can lead to out-of-bounds read. The attack may be performed from remote. Upgrading to version 0.11.4 and 0.12.0 is sufficient to resolve this issue. This patch is called 855a0853ad3abd4a6cd85ce06fce6d8d4c7a0b60. You should upgrade the affected component."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-30749","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-30749","fix":{"state":"wont-fix","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2025-30749","date":"2026-10-08","epss":0.01183,"percentile":0.66835}],"risk":0.5915,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-30749"},"relatedVulnerabilities":[{"id":"CVE-2025-30749","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-30749","date":"2026-10-08","epss":0.01183,"percentile":0.66835}],"urls":["https://www.oracle.com/security-alerts/cpujul2025.html","https://lists.debian.org/debian-lts-announce/2025/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00014.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-30749","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."}]},{"artifact":{"id":"fb5a34ec95412e7a","cpes":["cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1-6:libtasn1_6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1_6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1_6:4.16.0-2:*:*:*:*:*:*:*"],"name":"libtasn1-6","purl":"pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"4.16.0-2","language":"","licenses":["sha256:ab2f3532a1bf45d90643e92c1dfb985982698ecbf63f12595acfd9598d36350d"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtasn1-6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libtasn1-6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-13151","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"libtasn1-6","version":"4.16.0-2"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-13151","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-13151","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-13151","date":"2026-10-08","epss":0.01175,"percentile":0.66615}],"risk":0.5875,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-13151"},"relatedVulnerabilities":[{"id":"CVE-2025-13151","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-13151","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-13151","date":"2026-10-08","epss":0.01175,"percentile":0.66615}],"urls":["https://gitlab.com/gnutls/libtasn1","https://gitlab.com/gnutls/libtasn1/-/merge_requests/121","http://www.openwall.com/lists/oss-security/2026/01/08/5","https://www.kb.cert.org/vuls/id/271649"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-13151","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string."}]},{"artifact":{"id":"22e1a4a293341544","cpes":["cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*","cpe:2.3:a:libldap-2.4-2:libldap_2.4_2:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*","cpe:2.3:a:libldap_2.4_2:libldap-2.4-2:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*","cpe:2.3:a:libldap_2.4_2:libldap_2.4_2:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*","cpe:2.3:a:libldap-2.4:libldap-2.4-2:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*","cpe:2.3:a:libldap-2.4:libldap_2.4_2:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*","cpe:2.3:a:libldap_2.4:libldap-2.4-2:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*","cpe:2.3:a:libldap_2.4:libldap_2.4_2:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*","cpe:2.3:a:libldap:libldap-2.4-2:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*","cpe:2.3:a:libldap:libldap_2.4_2:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*"],"name":"libldap-2.4-2","purl":"pkg:deb/ubuntu/libldap-2.4-2@2.4.49%2Bdfsg-2ubuntu1.9?arch=amd64&distro=ubuntu-20.04&upstream=openldap","type":"deb","version":"2.4.49+dfsg-2ubuntu1.9","language":"","licenses":["sha256:0690f1ee382f98e95b446743db55395641d5e258de65939e9cb1c660d67a43a8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libldap-2.4-2/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libldap-2.4-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libldap-2.4-2:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libldap-2.4-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openldap"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.4.49+dfsg-2ubuntu1.10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-2953","versionConstraint":"< 2.4.49+dfsg-2ubuntu1.10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openldap","version":"2.4.49+dfsg-2ubuntu1.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-2953","fix":{"state":"fixed","versions":["2.4.49+dfsg-2ubuntu1.10"],"available":[{"date":"2024-01-30","kind":"advisory","version":"2.4.49+dfsg-2ubuntu1.10"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-2953","date":"2026-10-08","epss":0.0193,"percentile":0.7939}],"risk":0.579,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-2953"},"relatedVulnerabilities":[{"id":"CVE-2023-2953","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-2953","date":"2026-10-08","epss":0.0193,"percentile":0.7939}],"urls":["http://seclists.org/fulldisclosure/2023/Jul/47","http://seclists.org/fulldisclosure/2023/Jul/48","http://seclists.org/fulldisclosure/2023/Jul/52","https://access.redhat.com/security/cve/CVE-2023-2953","https://bugs.openldap.org/show_bug.cgi?id=9904","https://security.netapp.com/advisory/ntap-20230703-0005/","https://support.apple.com/kb/HT213843","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-2953","description":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function."}]},{"artifact":{"id":"8665568c3d296395","cpes":["cpe:2.3:a:libldap-common:libldap-common:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*","cpe:2.3:a:libldap-common:libldap_common:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*","cpe:2.3:a:libldap_common:libldap-common:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*","cpe:2.3:a:libldap_common:libldap_common:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*","cpe:2.3:a:libldap:libldap-common:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*","cpe:2.3:a:libldap:libldap_common:2.4.49\\+dfsg-2ubuntu1.9:*:*:*:*:*:*:*"],"name":"libldap-common","purl":"pkg:deb/ubuntu/libldap-common@2.4.49%2Bdfsg-2ubuntu1.9?arch=all&distro=ubuntu-20.04&upstream=openldap","type":"deb","version":"2.4.49+dfsg-2ubuntu1.9","language":"","licenses":["sha256:0690f1ee382f98e95b446743db55395641d5e258de65939e9cb1c660d67a43a8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libldap-common/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libldap-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libldap-common.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libldap-common.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libldap-common.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libldap-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libldap-common.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libldap-common.list"}],"upstreams":[{"name":"openldap"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.4.49+dfsg-2ubuntu1.10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-2953","versionConstraint":"< 2.4.49+dfsg-2ubuntu1.10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openldap","version":"2.4.49+dfsg-2ubuntu1.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-2953","fix":{"state":"fixed","versions":["2.4.49+dfsg-2ubuntu1.10"],"available":[{"date":"2024-01-30","kind":"advisory","version":"2.4.49+dfsg-2ubuntu1.10"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-2953","date":"2026-10-08","epss":0.0193,"percentile":0.7939}],"risk":0.579,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-2953"},"relatedVulnerabilities":[{"id":"CVE-2023-2953","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2023-2953","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-2953","date":"2026-10-08","epss":0.0193,"percentile":0.7939}],"urls":["http://seclists.org/fulldisclosure/2023/Jul/47","http://seclists.org/fulldisclosure/2023/Jul/48","http://seclists.org/fulldisclosure/2023/Jul/52","https://access.redhat.com/security/cve/CVE-2023-2953","https://bugs.openldap.org/show_bug.cgi?id=9904","https://security.netapp.com/advisory/ntap-20230703-0005/","https://support.apple.com/kb/HT213843","https://support.apple.com/kb/HT213844","https://support.apple.com/kb/HT213845"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-2953","description":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function."}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4813","versionConstraint":"< 2.31-0ubuntu9.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-4813","fix":{"state":"fixed","versions":["2.31-0ubuntu9.14"],"available":[{"date":"2023-12-07","kind":"advisory","version":"2.31-0ubuntu9.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4813","date":"2026-10-08","epss":0.01926,"percentile":0.79336}],"risk":0.5778,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-4813"},"relatedVulnerabilities":[{"id":"CVE-2023-4813","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4813","date":"2026-10-08","epss":0.01926,"percentile":0.79336}],"urls":["https://access.redhat.com/errata/RHBA-2024:2413","https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4813","https://bugzilla.redhat.com/show_bug.cgi?id=2237798","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://security.netapp.com/advisory/ntap-20231110-0003/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4813","description":"A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4813","versionConstraint":"< 2.31-0ubuntu9.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-4813","fix":{"state":"fixed","versions":["2.31-0ubuntu9.14"],"available":[{"date":"2023-12-07","kind":"advisory","version":"2.31-0ubuntu9.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4813","date":"2026-10-08","epss":0.01926,"percentile":0.79336}],"risk":0.5778,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-4813"},"relatedVulnerabilities":[{"id":"CVE-2023-4813","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4813","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4813","date":"2026-10-08","epss":0.01926,"percentile":0.79336}],"urls":["https://access.redhat.com/errata/RHBA-2024:2413","https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4813","https://bugzilla.redhat.com/show_bug.cgi?id=2237798","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://security.netapp.com/advisory/ntap-20231110-0003/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4813","description":"A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge."}]},{"artifact":{"id":"33bfbfa0d7f4ffac","cpes":["cpe:2.3:a:org.springframework:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-webmvc:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-webmvc:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_webmvc:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_webmvc:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_webmvc:5.3.22:*:*:*:*:*:*:*"],"name":"spring-webmvc","purl":"pkg:maven/org.springframework/spring-webmvc@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","manifestName":"","pomArtifactID":"spring-webmvc","archiveDigests":[{"value":"519d86b7ac9b8b6bb54739eb4eb73dc13a263b28","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-pc63-qcmh-9cmg","versionConstraint":">=5.3.0,<=5.3.49 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-webmvc","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-pc63-qcmh-9cmg","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-47884","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-47884","date":"2026-10-08","epss":0.00605,"percentile":0.47314}],"risk":0.5687,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-47884","https://spring.io/security/cve-2026-47884","https://github.com/spring-projects/spring-framework/commit/692dbc9160de3b5de50ccedeee014716d0cedb7b"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-pc63-qcmh-9cmg","description":"Spring Framework Improper Path Limitation in XsltView"},"relatedVulnerabilities":[{"id":"CVE-2026-47884","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-47884","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-47884","date":"2026-10-08","epss":0.00605,"percentile":0.47314}],"urls":["https://spring.io/security/cve-2026-47884"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-47884","description":"Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an \"/**\" mapping that results in view rendering, and where the view name is not explicitly specified.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6.2.0 - 6.2.19\nSpring Framework 6.1.0 - 6.1.28\nSpring Framework 6.0.0 - 6.0.30\nSpring Framework 5.3.0 - 5.3.49\nSpring Framework 5.2.25.RELEASE and earlier"}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.12+7-1ubuntu2~20.04"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-21147","versionConstraint":"< 17.0.12+7-1ubuntu2~20.04 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-21147","fix":{"state":"fixed","versions":["17.0.12+7-1ubuntu2~20.04"],"available":[{"date":"2024-07-31","kind":"advisory","version":"17.0.12+7-1ubuntu2~20.04"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-21147","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21147","date":"2026-10-08","epss":0.01136,"percentile":0.65525}],"risk":0.5680000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-21147"},"relatedVulnerabilities":[{"id":"CVE-2024-21147","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21147","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21147","date":"2026-10-08","epss":0.01136,"percentile":0.65525}],"urls":["https://security.netapp.com/advisory/ntap-20240719-0008/","https://www.oracle.com/security-alerts/cpujul2024.html","https://openjdk.org/groups/vulnerability/advisories/2024-07-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21147","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"3c96e5014ea74a87","cpes":["cpe:2.3:a:bouncycastle-org:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov_jdk15on:1.60:*:*:*:*:*:*:*"],"name":"bcprov-jdk15on","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.60","type":"java-archive","version":"1.60","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","manifestName":"","pomArtifactID":"bcprov-jdk15on","archiveDigests":[{"value":"bd47ad3bd14b8e82595c7adaa143501e60842a84","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.78"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-8xfc-gm6g-vgpv","versionConstraint":"<1.78 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bcprov-jdk15on","version":"1.60"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-8xfc-gm6g-vgpv","fix":{"state":"fixed","versions":["1.78"],"available":[{"date":"2024-05-15","kind":"first-observed","version":"1.78"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-29857","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-29857","date":"2026-10-08","epss":0.011,"percentile":0.64664}],"risk":0.5665,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-29857","https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857","https://www.bouncycastle.org/latest_releases.html","https://github.com/bcgit/bc-csharp/commit/56daa6eac526f165416d17f661422d60de0dfd63","https://github.com/bcgit/bc-java/commit/fee80dd230e7fba132d03a34f1dd1d6aae0d0281","https://github.com/bcgit/bc-java/commit/efc498ca4caa340ac2fe11f2efee06c1a294501f","https://security.netapp.com/advisory/ntap-20241206-0008"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-8xfc-gm6g-vgpv","description":"Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation."},"relatedVulnerabilities":[{"id":"CVE-2024-29857","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-29857","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-29857","date":"2026-10-08","epss":0.011,"percentile":0.64664}],"urls":["https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857","https://www.bouncycastle.org/latest_releases.html","https://security.netapp.com/advisory/ntap-20241206-0008/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-29857","description":"An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters."}]},{"artifact":{"id":"cbeb1ac80586032b","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.9-1ubuntu0.6:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.2.9-1ubuntu0.6?arch=amd64&distro=ubuntu-20.04&upstream=expat","type":"deb","version":"2.2.9-1ubuntu0.6","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.2.9-1ubuntu0.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-45491","versionConstraint":"< 2.2.9-1ubuntu0.7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"expat","version":"2.2.9-1ubuntu0.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-45491","fix":{"state":"fixed","versions":["2.2.9-1ubuntu0.7"],"available":[{"date":"2024-09-12","kind":"advisory","version":"2.2.9-1ubuntu0.7"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-45491","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-45491","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-45491","date":"2026-10-08","epss":0.0113,"percentile":0.65386}],"risk":0.565,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-45491"},"relatedVulnerabilities":[{"id":"CVE-2024-45491","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-45491","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-45491","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-45491","date":"2026-10-08","epss":0.0113,"percentile":0.65386}],"urls":["https://github.com/libexpat/libexpat/issues/888","https://github.com/libexpat/libexpat/pull/891","https://lists.debian.org/debian-lts-announce/2024/09/msg00036.html","https://security.netapp.com/advisory/ntap-20241018-0003/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-45491","description":"An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX)."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42009","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-42009","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-42009","cwe":"CWE-475","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-42009","cwe":"CWE-475","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42009","date":"2026-10-08","epss":0.01129,"percentile":0.65367}],"risk":0.5645,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42009"},"relatedVulnerabilities":[{"id":"CVE-2026-42009","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42009","cwe":"CWE-475","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-42009","cwe":"CWE-475","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42009","date":"2026-10-08","epss":0.01129,"percentile":0.65367}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:29794","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:34372","https://access.redhat.com/errata/RHSA-2026:34764","https://access.redhat.com/errata/RHSA-2026:34788","https://access.redhat.com/errata/RHSA-2026:36004","https://access.redhat.com/errata/RHSA-2026:36005","https://access.redhat.com/errata/RHSA-2026:36006","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56786","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:56911","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-42009","https://bugzilla.redhat.com/show_bug.cgi?id=2467279","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42009.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42009","description":"A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-33846","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-33846","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-33846","cwe":"CWE-130","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33846","cwe":"CWE-130","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33846","date":"2026-10-08","epss":0.01123,"percentile":0.65216}],"risk":0.5615,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-33846"},"relatedVulnerabilities":[{"id":"CVE-2026-33846","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33846","cwe":"CWE-130","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33846","cwe":"CWE-130","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33846","date":"2026-10-08","epss":0.01123,"percentile":0.65216}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:34372","https://access.redhat.com/errata/RHSA-2026:36004","https://access.redhat.com/errata/RHSA-2026:36005","https://access.redhat.com/errata/RHSA-2026:36006","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56786","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:56911","https://access.redhat.com/errata/RHSA-2026:57402","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-33846","https://bugzilla.redhat.com/show_bug.cgi?id=2450625","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33846.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33846","description":"A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption."}]},{"artifact":{"id":"e7531094aa31ce73","cpes":["cpe:2.3:a:org.springframework:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-expression:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-expression:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_expression:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_expression:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_expression:5.3.22:*:*:*:*:*:*:*"],"name":"spring-expression","purl":"pkg:maven/org.springframework/spring-expression@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","manifestName":"","pomArtifactID":"spring-expression","archiveDigests":[{"value":"c056f9e9994b18c95deead695f9471952d1f21d1","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"5.3.26"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-564r-hj7v-mcr5","versionConstraint":">=5.3.0,<5.3.26 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-expression","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-564r-hj7v-mcr5","fix":{"state":"fixed","versions":["5.3.26"],"available":[{"date":"2024-02-03","kind":"first-observed","version":"5.3.26"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-20861","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-20861","date":"2026-10-08","epss":0.0097,"percentile":0.6074}],"risk":0.55775,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-20861","https://spring.io/security/cve-2023-20861","https://github.com/spring-projects/spring-framework/commit/430fc25acad2e85cbdddcd52b64481691f03ebd1","https://github.com/spring-projects/spring-framework/commit/52c93b1c4b24d70de233a958e60e7c5822bd274f","https://github.com/spring-projects/spring-framework/commit/935c29e3ddba5b19951e54f6685c70ed45d9cbe5","https://security.netapp.com/advisory/ntap-20230420-0007"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-564r-hj7v-mcr5","description":"Spring Framework vulnerable to denial of service via specially crafted SpEL expression"},"relatedVulnerabilities":[{"id":"CVE-2023-20861","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-20861","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-20861","date":"2026-10-08","epss":0.0097,"percentile":0.6074}],"urls":["https://security.netapp.com/advisory/ntap-20230420-0007/","https://spring.io/security/cve-2023-20861"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-20861","description":"In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition."}]},{"artifact":{"id":"fb5a34ec95412e7a","cpes":["cpe:2.3:a:libtasn1-6:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1-6:libtasn1_6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1_6:libtasn1_6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1-6:4.16.0-2:*:*:*:*:*:*:*","cpe:2.3:a:libtasn1:libtasn1_6:4.16.0-2:*:*:*:*:*:*:*"],"name":"libtasn1-6","purl":"pkg:deb/ubuntu/libtasn1-6@4.16.0-2?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"4.16.0-2","language":"","licenses":["sha256:ab2f3532a1bf45d90643e92c1dfb985982698ecbf63f12595acfd9598d36350d"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtasn1-6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libtasn1-6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libtasn1-6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"4.16.0-2ubuntu0.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-12133","versionConstraint":"< 4.16.0-2ubuntu0.1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"libtasn1-6","version":"4.16.0-2"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-12133","fix":{"state":"fixed","versions":["4.16.0-2ubuntu0.1"],"available":[{"date":"2025-02-18","kind":"advisory","version":"4.16.0-2ubuntu0.1"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-12133","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-12133","date":"2026-10-08","epss":0.0111,"percentile":0.64902}],"risk":0.555,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-12133"},"relatedVulnerabilities":[{"id":"CVE-2024-12133","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-12133","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-12133","date":"2026-10-08","epss":0.0111,"percentile":0.64902}],"urls":["https://access.redhat.com/errata/RHSA-2025:17347","https://access.redhat.com/errata/RHSA-2025:4049","https://access.redhat.com/errata/RHSA-2025:7077","https://access.redhat.com/errata/RHSA-2025:8021","https://access.redhat.com/errata/RHSA-2025:8385","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/security/cve/CVE-2024-12133","https://bugzilla.redhat.com/show_bug.cgi?id=2344611","https://gitlab.com/gnutls/libtasn1/-/blob/master/doc/security/CVE-2024-12133.md","https://gitlab.com/gnutls/libtasn1/-/issues/52","http://www.openwall.com/lists/oss-security/2025/02/06/6","https://lists.debian.org/debian-lts-announce/2025/02/msg00025.html","https://security.netapp.com/advisory/ntap-20250523-0003/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-12133","description":"A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack."}]},{"artifact":{"id":"f2334636ff06602e","cpes":["cpe:2.3:a:libjpeg-turbo8:libjpeg-turbo8:2.0.3-0ubuntu1.20.04.3:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg-turbo8:libjpeg_turbo8:2.0.3-0ubuntu1.20.04.3:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg_turbo8:libjpeg-turbo8:2.0.3-0ubuntu1.20.04.3:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg_turbo8:libjpeg_turbo8:2.0.3-0ubuntu1.20.04.3:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg:libjpeg-turbo8:2.0.3-0ubuntu1.20.04.3:*:*:*:*:*:*:*","cpe:2.3:a:libjpeg:libjpeg_turbo8:2.0.3-0ubuntu1.20.04.3:*:*:*:*:*:*:*"],"name":"libjpeg-turbo8","purl":"pkg:deb/ubuntu/libjpeg-turbo8@2.0.3-0ubuntu1.20.04.3?arch=amd64&distro=ubuntu-20.04&upstream=libjpeg-turbo","type":"deb","version":"2.0.3-0ubuntu1.20.04.3","language":"","licenses":["sha256:193468d9eb043a180f6f9e3386f7205104908dcb8525ad39c8236990dfd452ef"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libjpeg-turbo8/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libjpeg-turbo8/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libjpeg-turbo8:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libjpeg-turbo8:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libjpeg-turbo"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-10126","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"libjpeg-turbo","version":"2.0.3-0ubuntu1.20.04.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-10126","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-10126","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-10126","date":"2026-10-08","epss":0.01829,"percentile":0.78201}],"risk":0.5487,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-10126"},"relatedVulnerabilities":[{"id":"CVE-2018-10126","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-10126","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-10126","date":"2026-10-08","epss":0.01829,"percentile":0.78201}],"urls":["http://bugzilla.maptools.org/show_bug.cgi?id=2786","https://gitlab.com/libtiff/libtiff/-/issues/128","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-10126","description":"ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c."}]},{"artifact":{"id":"7d39cfd42008e1ef","cpes":["cpe:2.3:a:libharfbuzz0b:libharfbuzz0b:2.6.4-1ubuntu4.2:*:*:*:*:*:*:*"],"name":"libharfbuzz0b","purl":"pkg:deb/ubuntu/libharfbuzz0b@2.6.4-1ubuntu4.2?arch=amd64&distro=ubuntu-20.04&upstream=harfbuzz","type":"deb","version":"2.6.4-1ubuntu4.2","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libharfbuzz0b/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libharfbuzz0b/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libharfbuzz0b:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libharfbuzz0b:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"harfbuzz"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.6.4-1ubuntu4.3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-25193","versionConstraint":"< 2.6.4-1ubuntu4.3 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"harfbuzz","version":"2.6.4-1ubuntu4.2"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-25193","fix":{"state":"fixed","versions":["2.6.4-1ubuntu4.3"],"available":[{"date":"2025-02-03","kind":"advisory","version":"2.6.4-1ubuntu4.3"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-25193","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-25193","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-25193","date":"2026-10-08","epss":0.01812,"percentile":0.77984}],"risk":0.5436,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-25193"},"relatedVulnerabilities":[{"id":"CVE-2023-25193","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-25193","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-25193","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-25193","date":"2026-10-08","epss":0.01812,"percentile":0.77984}],"urls":["https://chromium.googlesource.com/chromium/src/+/e1f324aa681af54101c1f2d173d92adb80e37088/DEPS#361","https://github.com/harfbuzz/harfbuzz/blob/2822b589bc837fae6f66233e2cf2eef0f6ce8470/src/hb-ot-layout-gsubgpos.hh","https://github.com/harfbuzz/harfbuzz/commit/85be877925ddbf34f74a1229f3ca1716bb6170dc","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWCHWSICWVZSAXP2YAXM65JC2GR53547/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZ5M2GSAIHFPLHYJXUPQ2QDJCLWXUGO3/","https://security.netapp.com/advisory/ntap-20230725-0006/","https://openjdk.org/groups/vulnerability/advisories/2023-07-18","https://www.oracle.com/security-alerts/cpujul2023.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-25193","description":"hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks."}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.16"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33601","versionConstraint":"< 2.31-0ubuntu9.16 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-33601","fix":{"state":"fixed","versions":["2.31-0ubuntu9.16"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.31-0ubuntu9.16"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-08","epss":0.01075,"percentile":0.63946}],"risk":0.5375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33601"},"relatedVulnerabilities":[{"id":"CVE-2024-33601","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-08","epss":0.01075,"percentile":0.63946}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0014/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33601","description":"nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.16"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33601","versionConstraint":"< 2.31-0ubuntu9.16 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-33601","fix":{"state":"fixed","versions":["2.31-0ubuntu9.16"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.31-0ubuntu9.16"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-08","epss":0.01075,"percentile":0.63946}],"risk":0.5375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33601"},"relatedVulnerabilities":[{"id":"CVE-2024-33601","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-08","epss":0.01075,"percentile":0.63946}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0014/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33601","description":"nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"b082b70df3e54e06","cpes":["cpe:2.3:a:locales:locales:2.31-0ubuntu9.14:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.31-0ubuntu9.14?arch=all&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.14","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.16"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-33601","versionConstraint":"< 2.31-0ubuntu9.16 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.14"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-33601","fix":{"state":"fixed","versions":["2.31-0ubuntu9.16"],"available":[{"date":"2024-05-31","kind":"advisory","version":"2.31-0ubuntu9.16"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-08","epss":0.01075,"percentile":0.63946}],"risk":0.5375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-33601"},"relatedVulnerabilities":[{"id":"CVE-2024-33601","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-33601","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-33601","date":"2026-10-08","epss":0.01075,"percentile":0.63946}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/06/msg00026.html","https://security.netapp.com/advisory/ntap-20240524-0014/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0007","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-33601","description":"nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary."}]},{"artifact":{"id":"3c96e5014ea74a87","cpes":["cpe:2.3:a:bouncycastle-org:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov_jdk15on:1.60:*:*:*:*:*:*:*"],"name":"bcprov-jdk15on","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.60","type":"java-archive","version":"1.60","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","manifestName":"","pomArtifactID":"bcprov-jdk15on","archiveDigests":[{"value":"bd47ad3bd14b8e82595c7adaa143501e60842a84","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wjxj-5m7g-mg7q","versionConstraint":"<1.70 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bcprov-jdk15on","version":"1.60"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wjxj-5m7g-mg7q","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-33202","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-33202","date":"2026-10-08","epss":0.0102,"percentile":0.62299}],"risk":0.5355000000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-33202","https://github.com/bcgit/bc-java/wiki/CVE-2023-33202","https://security.netapp.com/advisory/ntap-20240125-0001","https://github.com/bcgit/bc-java/commit/0c576892862ed41894f49a8f639112e8d66d229c","https://bouncycastle.org"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wjxj-5m7g-mg7q","description":"Bouncy Castle Denial of Service (DoS)"},"relatedVulnerabilities":[{"id":"CVE-2023-33202","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-33202","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-33202","date":"2026-10-08","epss":0.0102,"percentile":0.62299}],"urls":["https://bouncycastle.org","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902023%E2%80%9033202","https://github.com/bcgit/bc-java/wiki/CVE-2023-33202","https://security.netapp.com/advisory/ntap-20240125-0001/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-33202","description":"Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM encoded streams containing X.509 certificates, PKCS8 encoded keys, and PKCS7 objects. Parsing a file that has crafted ASN.1 data through the PEMParser causes an OutOfMemoryError, which can enable a denial of service attack. (For users of the FIPS Java API: BC-FJA 1.0.2.3 and earlier are affected; BC-FJA 1.0.2.4 is fixed.)"}]},{"artifact":{"id":"75f53734df5b814d","cpes":["cpe:2.3:a:com.google.protobuf:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.protobuf:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:com.google.protobuf:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf-java:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf_java:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf-java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf_java:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:protobuf:protobuf:3.6.0:*:*:*:*:*:*:*","cpe:2.3:a:google:protobuf:3.6.0:*:*:*:*:*:*:*"],"name":"protobuf-java","purl":"pkg:maven/com.google.protobuf/protobuf-java@3.6.0","type":"java-archive","version":"3.6.0","language":"java","licenses":["https://opensource.org/licenses/BSD-3-Clause"],"metadata":{"pomGroupID":"com.google.protobuf","virtualPath":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","manifestName":"","pomArtifactID":"protobuf-java","archiveDigests":[{"value":"5333f7e422744d76840c08a106e28e519fbe3acd","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/protobuf-java-3.6.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.16.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4gg5-vx3j-xwc7","versionConstraint":">=3.0.0,<3.16.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.google.protobuf:protobuf-java","version":"3.6.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-4gg5-vx3j-xwc7","fix":{"state":"fixed","versions":["3.16.3"],"available":[{"date":"2022-12-21","kind":"first-observed","version":"3.16.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3510","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-3510","date":"2026-10-08","epss":0.00713,"percentile":0.52214}],"risk":0.53475,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2022-3510","https://github.com/protocolbuffers/protobuf/commit/db7c17803320525722f45c1d26fc08bc41d1bf48"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4gg5-vx3j-xwc7","description":"Protobuf Java vulnerable to Uncontrolled Resource Consumption"},"relatedVulnerabilities":[{"id":"CVE-2022-3510","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3510","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-3510","date":"2026-10-08","epss":0.00713,"percentile":0.52214}],"urls":["https://github.com/protocolbuffers/protobuf/commit/db7c17803320525722f45c1d26fc08bc41d1bf48"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3510","description":"A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above."}]},{"artifact":{"id":"f6d59748713e2bd6","cpes":["cpe:2.3:a:libcups2:libcups2:2.3.1-9ubuntu1.6:*:*:*:*:*:*:*"],"name":"libcups2","purl":"pkg:deb/ubuntu/libcups2@2.3.1-9ubuntu1.6?arch=amd64&distro=ubuntu-20.04&upstream=cups","type":"deb","version":"2.3.1-9ubuntu1.6","language":"","licenses":["Apache-2.0","Apache-2.0-with-GPL2-LGPL2-Exception","BSD-3-clause","FSFUL","Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcups2/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libcups2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcups2:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libcups2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cups"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-58364","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"cups","version":"2.3.1-9ubuntu1.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-58364","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-58364","cwe":"CWE-20","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2025-58364","cwe":"CWE-476","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-58364","date":"2026-10-08","epss":0.01067,"percentile":0.63744}],"risk":0.5335000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-58364"},"relatedVulnerabilities":[{"id":"CVE-2025-58364","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-58364","cwe":"CWE-20","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2025-58364","cwe":"CWE-476","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-58364","date":"2026-10-08","epss":0.01067,"percentile":0.63744}],"urls":["https://github.com/OpenPrinting/cups/commit/e58cba9d6fceed4242980e51dbd1302cf638ab1d","https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4","http://www.openwall.com/lists/oss-security/2025/09/11/2","https://lists.debian.org/debian-lts-announce/2025/09/msg00013.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-58364","description":"OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local subnet in default configurations. It can cause the cups & cups-browsed to crash, on all the machines in local network who are listening for printers (so by default for all regular linux machines). On systems where the vulnerability CVE-2024-47176 (cups-filters 1.x/cups-browsed 2.x vulnerability) was not fixed, and the firewall on the machine does not reject incoming communication to IPP port, and the machine is set to be available to public internet, attack vector \"Network\" is possible. The current versions of CUPS and cups-browsed projects have the attack vector \"Adjacent\" in their default configurations. Version 2.4.13 contains a patch for CVE-2025-58364."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-25611","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-25611","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-25611","cwe":"CWE-405","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-25611","date":"2026-10-08","epss":0.00707,"percentile":0.52009}],"risk":0.53025,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-25611"},"relatedVulnerabilities":[{"id":"CVE-2026-25611","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-25611","cwe":"CWE-405","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-25611","date":"2026-10-08","epss":0.00707,"percentile":0.52009}],"urls":["https://jira.mongodb.org/browse/SERVER-116206","https://jira.mongodb.org/browse/SERVER-116210","https://jira.mongodb.org/browse/SERVER-116211"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-25611","description":"A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-25611","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-25611","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-25611","cwe":"CWE-405","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-25611","date":"2026-10-08","epss":0.00707,"percentile":0.52009}],"risk":0.53025,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-25611"},"relatedVulnerabilities":[{"id":"CVE-2026-25611","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-25611","cwe":"CWE-405","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-25611","date":"2026-10-08","epss":0.00707,"percentile":0.52009}],"urls":["https://jira.mongodb.org/browse/SERVER-116206","https://jira.mongodb.org/browse/SERVER-116210","https://jira.mongodb.org/browse/SERVER-116211"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-25611","description":"A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-25611","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-25611","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-25611","cwe":"CWE-405","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-25611","date":"2026-10-08","epss":0.00707,"percentile":0.52009}],"risk":0.53025,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-25611"},"relatedVulnerabilities":[{"id":"CVE-2026-25611","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-25611","cwe":"CWE-405","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-25611","date":"2026-10-08","epss":0.00707,"percentile":0.52009}],"urls":["https://jira.mongodb.org/browse/SERVER-116206","https://jira.mongodb.org/browse/SERVER-116210","https://jira.mongodb.org/browse/SERVER-116211"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-25611","description":"A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.121"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9xv2-5v5q-p794","versionConstraint":">=9.0.0.M1,<9.0.121 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-9xv2-5v5q-p794","fix":{"state":"fixed","versions":["9.0.121"],"available":[{"date":"2026-09-03","kind":"first-observed","version":"9.0.121"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65905","cwe":"CWE-294","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-65905","date":"2026-10-08","epss":0.00562,"percentile":0.44994}],"risk":0.5282800000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-65905","https://lists.apache.org/thread/9v114xlpgbzrrbzz5vf9f6r2q4wnxwwj","http://www.openwall.com/lists/oss-security/2026/08/26/4"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9xv2-5v5q-p794","description":"Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2026-65905","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65905","cwe":"CWE-294","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-65905","date":"2026-10-08","epss":0.00562,"percentile":0.44994}],"urls":["https://lists.apache.org/thread/9v114xlpgbzrrbzz5vf9f6r2q4wnxwwj","http://www.openwall.com/lists/oss-security/2026/08/26/4"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65905","description":"Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST \nauthenticated request with a nonceCount on the upper boundary of the \nreplay window then that request is replayable once only while the \nassociated nonceCount remains within the replay window.\n\n\n\n \n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.0 through 8.5.100, from 7.0.30 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue."}]},{"artifact":{"id":"68a933b61e16a6b4","cpes":["cpe:2.3:a:libpng16-16:libpng16-16:1.6.37-2:*:*:*:*:*:*:*","cpe:2.3:a:libpng16-16:libpng16_16:1.6.37-2:*:*:*:*:*:*:*","cpe:2.3:a:libpng16_16:libpng16-16:1.6.37-2:*:*:*:*:*:*:*","cpe:2.3:a:libpng16_16:libpng16_16:1.6.37-2:*:*:*:*:*:*:*","cpe:2.3:a:libpng16:libpng16-16:1.6.37-2:*:*:*:*:*:*:*","cpe:2.3:a:libpng16:libpng16_16:1.6.37-2:*:*:*:*:*:*:*"],"name":"libpng16-16","purl":"pkg:deb/ubuntu/libpng16-16@1.6.37-2?arch=amd64&distro=ubuntu-20.04&upstream=libpng1.6","type":"deb","version":"1.6.37-2","language":"","licenses":["Apache-2.0","BSD-3-clause","BSD-like-with-advertising-clause","GPL-2","GPL-2+","expat","libpng"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpng16-16/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libpng16-16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpng16-16:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libpng16-16:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libpng1.6"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-33416","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"libpng1.6","version":"1.6.37-2"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-33416","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-33416","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-33416","date":"2026-10-08","epss":0.01052,"percentile":0.63289}],"risk":0.526,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-33416"},"relatedVulnerabilities":[{"id":"CVE-2026-33416","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33416","cwe":"CWE-416","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-33416","date":"2026-10-08","epss":0.01052,"percentile":0.63289}],"urls":["https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb","https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667","https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25","https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1","https://github.com/pnggroup/libpng/pull/824","https://github.com/pnggroup/libpng/security/advisories/GHSA-m4pc-p4q3-4c7j"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33416","description":"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE` each alias a heap-allocated buffer between `png_struct` and `png_info`, sharing a single allocation across two structs with independent lifetimes. The `trans_alpha` aliasing has been present since at least libpng 1.0, and the `palette` aliasing since at least 1.2.1. Both affect all prior release lines `png_set_tRNS` sets `png_ptr->trans_alpha = info_ptr->trans_alpha` (256-byte buffer) and `png_set_PLTE` sets `info_ptr->palette = png_ptr->palette` (768-byte buffer). In both cases, calling `png_free_data` (with `PNG_FREE_TRNS` or `PNG_FREE_PLTE`) frees the buffer through `info_ptr` while the corresponding `png_ptr` pointer remains dangling. Subsequent row-transform functions dereference and, in some code paths, write to the freed memory. A second call to `png_set_tRNS` or `png_set_PLTE` has the same effect, because both functions call `png_free_data` internally before reallocating the `info_ptr` buffer. Version 1.6.56 fixes the issue."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-32036","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2021-32036","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-32036","cwe":"CWE-770","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-32036","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-32036","date":"2026-10-08","epss":0.01043,"percentile":0.63024}],"risk":0.5215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-32036"},"relatedVulnerabilities":[{"id":"CVE-2021-32036","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","metrics":{"baseScore":5.5,"impactScore":5,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-32036","cwe":"CWE-770","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-32036","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-32036","date":"2026-10-08","epss":0.01043,"percentile":0.63024}],"urls":["https://jira.mongodb.org/browse/SERVER-59294"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-32036","description":"An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.3; MongoDB Server v4.4 versions prior to and including 4.4.9; MongoDB Server v4.2 versions prior to and including 4.2.16 and MongoDB Server v4.0 versions prior to and including 4.0.28"}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-32036","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2021-32036","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-32036","cwe":"CWE-770","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-32036","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-32036","date":"2026-10-08","epss":0.01043,"percentile":0.63024}],"risk":0.5215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-32036"},"relatedVulnerabilities":[{"id":"CVE-2021-32036","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","metrics":{"baseScore":5.5,"impactScore":5,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-32036","cwe":"CWE-770","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-32036","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-32036","date":"2026-10-08","epss":0.01043,"percentile":0.63024}],"urls":["https://jira.mongodb.org/browse/SERVER-59294"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-32036","description":"An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.3; MongoDB Server v4.4 versions prior to and including 4.4.9; MongoDB Server v4.2 versions prior to and including 4.2.16 and MongoDB Server v4.0 versions prior to and including 4.0.28"}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-32036","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2021-32036","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2021-32036","cwe":"CWE-770","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-32036","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-32036","date":"2026-10-08","epss":0.01043,"percentile":0.63024}],"risk":0.5215,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2021-32036"},"relatedVulnerabilities":[{"id":"CVE-2021-32036","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","metrics":{"baseScore":5.5,"impactScore":5,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-32036","cwe":"CWE-770","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2021-32036","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-32036","date":"2026-10-08","epss":0.01043,"percentile":0.63024}],"urls":["https://jira.mongodb.org/browse/SERVER-59294"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-32036","description":"An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.3; MongoDB Server v4.4 versions prior to and including 4.4.9; MongoDB Server v4.2 versions prior to and including 4.2.16 and MongoDB Server v4.0 versions prior to and including 4.0.28"}]},{"artifact":{"id":"8a82f87cdb5f632b","cpes":["cpe:2.3:a:org.eclipse.paho.client.mqttv3:org.eclipse.paho.client.mqttv3:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.paho:org.eclipse.paho.client.mqttv3:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:org.eclipse.paho.client.mqttv3:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:client:org.eclipse.paho.client.mqttv3:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:mqttv3:org.eclipse.paho.client.mqttv3:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.paho.client.mqttv3:mqttv3:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.paho.client.mqttv3:paho:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:paho:org.eclipse.paho.client.mqttv3:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.paho:mqttv3:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.paho:paho:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:mqttv3:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:client:mqttv3:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:mqttv3:mqttv3:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:paho:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:client:paho:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:mqttv3:paho:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:paho:mqttv3:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:paho:paho:1.1.0:*:*:*:*:*:*:*"],"name":"org.eclipse.paho.client.mqttv3","purl":"pkg:maven/org.eclipse.paho/org.eclipse.paho.client.mqttv3@1.1.0","type":"java-archive","version":"1.1.0","language":"java","licenses":[],"metadata":{"pomGroupID":"org.eclipse.paho","virtualPath":"/usr/lib/unifi/lib/org.eclipse.paho.client.mqttv3-1.1.0.jar","manifestName":"","pomArtifactID":"org.eclipse.paho.client.mqttv3","archiveDigests":[{"value":"89d827ffa47c241f2627421ef1d6c7a8c207a341","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/org.eclipse.paho.client.mqttv3-1.1.0.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/org.eclipse.paho.client.mqttv3-1.1.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.2.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-63qc-p2x4-9fgf","versionConstraint":"<1.2.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.paho:org.eclipse.paho.client.mqttv3","version":"1.1.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-63qc-p2x4-9fgf","fix":{"state":"fixed","versions":["1.2.1"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"1.2.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11777","cwe":"CWE-346","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2019-11777","cwe":"CWE-346","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-11777","cwe":"CWE-755","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11777","date":"2026-10-08","epss":0.00834,"percentile":0.56381}],"risk":0.52125,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2019-11777","https://bugs.eclipse.org/bugs/show_bug.cgi?id=549934"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-63qc-p2x4-9fgf","description":"Improper Handling of Exceptional Conditions and Origin Validation Error in Eclipse Paho Java client library"},"relatedVulnerabilities":[{"id":"CVE-2019-11777","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11777","cwe":"CWE-346","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2019-11777","cwe":"CWE-346","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-11777","cwe":"CWE-755","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11777","date":"2026-10-08","epss":0.00834,"percentile":0.56381}],"urls":["https://bugs.eclipse.org/bugs/show_bug.cgi?id=549934"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-11777","description":"In the Eclipse Paho Java client library version 1.2.0, when connecting to an MQTT server using TLS and setting a host name verifier, the result of that verification is not checked. This could allow one MQTT server to impersonate another and provide the client library with incorrect information."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.12+7-1ubuntu2~20.04"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-21131","versionConstraint":"< 17.0.12+7-1ubuntu2~20.04 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-21131","fix":{"state":"fixed","versions":["17.0.12+7-1ubuntu2~20.04"],"available":[{"date":"2024-07-31","kind":"advisory","version":"17.0.12+7-1ubuntu2~20.04"}]},"cvss":[],"epss":[{"cve":"CVE-2024-21131","date":"2026-10-08","epss":0.0104,"percentile":0.62929}],"risk":0.52,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-21131"},"relatedVulnerabilities":[{"id":"CVE-2024-21131","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-21131","date":"2026-10-08","epss":0.0104,"percentile":0.62929}],"urls":["https://security.netapp.com/advisory/ntap-20240719-0008/","https://www.oracle.com/security-alerts/cpujul2024.html","https://openjdk.org/groups/vulnerability/advisories/2024-07-16"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21131","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cbeb1ac80586032b","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.9-1ubuntu0.6:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.2.9-1ubuntu0.6?arch=amd64&distro=ubuntu-20.04&upstream=expat","type":"deb","version":"2.2.9-1ubuntu0.6","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.2.9-1ubuntu0.8"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-50602","versionConstraint":"< 2.2.9-1ubuntu0.8 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"expat","version":"2.2.9-1ubuntu0.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-50602","fix":{"state":"fixed","versions":["2.2.9-1ubuntu0.8"],"available":[{"date":"2024-12-10","kind":"advisory","version":"2.2.9-1ubuntu0.8"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-50602","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-50602","date":"2026-10-08","epss":0.01033,"percentile":0.62707}],"risk":0.5165000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-50602"},"relatedVulnerabilities":[{"id":"CVE-2024-50602","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-50602","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-50602","date":"2026-10-08","epss":0.01033,"percentile":0.62707}],"urls":["https://github.com/libexpat/libexpat/pull/915","https://lists.debian.org/debian-lts-announce/2025/04/msg00040.html","https://security.netapp.com/advisory/ntap-20250404-0008/","https://docs.python.org/release/3.10.16/whatsnew/changelog.html","https://docs.python.org/release/3.11.11/whatsnew/changelog.html#python-3-11-11","https://docs.python.org/release/3.12.8/whatsnew/changelog.html#python-3-12-8","https://docs.python.org/release/3.13.1/whatsnew/changelog.html#python-3-13-1","https://docs.python.org/release/3.9.21/whatsnew/changelog.html","https://github.com/python/cpython/issues/126623"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-50602","description":"An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.116"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-563x-q5rq-57qp","versionConstraint":">=7.0.0,<9.0.116 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-563x-q5rq-57qp","fix":{"state":"fixed","versions":["9.0.116"],"available":[{"date":"2026-04-11","kind":"first-observed","version":"9.0.116"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-24880","cwe":"CWE-444","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-24880","date":"2026-10-08","epss":0.00683,"percentile":0.51012}],"risk":0.51225,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-24880","https://lists.apache.org/thread/2c682qnlg2tv4o5knlggqbl9yc2gb5sn","http://www.openwall.com/lists/oss-security/2026/04/09/20","https://github.com/apache/tomcat/commit/1b586d6aa8ae65726da5fa8799427b5d4718478a","https://github.com/apache/tomcat/commit/1e71441a15972f56e661b0b549fb9e5d838b83bb","https://github.com/apache/tomcat/commit/2cb06c34f661ca42f7570bbcc21e99806184bcc5","https://github.com/apache/tomcat/commit/6d478dbe18b7c4bb671c30fedf130309b0dab77c","https://github.com/apache/tomcat/commit/f07df938d00f7419b40fa65aa912966d0efac522","https://github.com/apache/tomcat/commit/fde1a8235fb73125217bd41e162aa0a113f33552","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.53","https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.20","https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.116","https://www.herodevs.com/vulnerability-directory/cve-2026-24880"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-563x-q5rq-57qp","description":"Apache Tomcat has an HTTP Request/Response Smuggling vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2026-24880","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-24880","cwe":"CWE-444","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-24880","date":"2026-10-08","epss":0.00683,"percentile":0.51012}],"urls":["https://lists.apache.org/thread/2c682qnlg2tv4o5knlggqbl9yc2gb5sn","http://www.openwall.com/lists/oss-security/2026/04/09/20"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-24880","description":"Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat via invalid chunk extension.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M1 through 10.1.52, from 9.0.0.M1 through 9.0.115, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109.\nOther, unsupported versions may also be affected.\n\nUsers are recommended to upgrade to version 11.0.20, 10.1.52 or 9.0.116, which fix the issue."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.14+7-1~20.04"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-21502","versionConstraint":"< 17.0.14+7-1~20.04 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-21502","fix":{"state":"fixed","versions":["17.0.14+7-1~20.04"],"available":[{"date":"2025-02-05","kind":"advisory","version":"17.0.14+7-1~20.04"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-21502","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-21502","date":"2026-10-08","epss":0.01007,"percentile":0.61919}],"risk":0.5035000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-21502"},"relatedVulnerabilities":[{"id":"CVE-2025-21502","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-21502","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-21502","date":"2026-10-08","epss":0.01007,"percentile":0.61919}],"urls":["https://www.oracle.com/security-alerts/cpujan2025.html","http://www.openwall.com/lists/oss-security/2025/01/25/6","https://lists.debian.org/debian-lts-announce/2025/01/msg00031.html","https://lists.debian.org/debian-lts-announce/2025/02/msg00004.html","https://security.netapp.com/advisory/ntap-20250124-0009/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-21502","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM Enterprise Edition: 20.3.16 and  21.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-25004","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-25004","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-25004","cwe":"CWE-20","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-25004","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-25004","date":"2026-10-08","epss":0.01004,"percentile":0.61845}],"risk":0.502,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-25004"},"relatedVulnerabilities":[{"id":"CVE-2018-25004","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-25004","cwe":"CWE-20","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-25004","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-25004","date":"2026-10-08","epss":0.01004,"percentile":0.61845}],"urls":["https://jira.mongodb.org/browse/SERVER-38275"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-25004","description":"A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-25004","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-25004","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-25004","cwe":"CWE-20","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-25004","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-25004","date":"2026-10-08","epss":0.01004,"percentile":0.61845}],"risk":0.502,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-25004"},"relatedVulnerabilities":[{"id":"CVE-2018-25004","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-25004","cwe":"CWE-20","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-25004","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-25004","date":"2026-10-08","epss":0.01004,"percentile":0.61845}],"urls":["https://jira.mongodb.org/browse/SERVER-38275"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-25004","description":"A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-25004","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-25004","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-25004","cwe":"CWE-20","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-25004","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-25004","date":"2026-10-08","epss":0.01004,"percentile":0.61845}],"risk":0.502,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-25004"},"relatedVulnerabilities":[{"id":"CVE-2018-25004","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-25004","cwe":"CWE-20","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2018-25004","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-25004","date":"2026-10-08","epss":0.01004,"percentile":0.61845}],"urls":["https://jira.mongodb.org/browse/SERVER-38275"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-25004","description":"A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11."}]},{"artifact":{"id":"c9a07c3b9df49ddb","cpes":["cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0-0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*"],"name":"libglib2.0-0","purl":"pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.6?arch=amd64&distro=ubuntu-20.04&upstream=glib2.0","type":"deb","version":"2.64.6-1~ubuntu20.04.6","language":"","licenses":["sha256:f65e92234e97932114d94d72fc898fcddc854345f77caae80af26ad5cd94cce8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libglib2.0-0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libglib2.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glib2.0"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-58016","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glib2.0","version":"2.64.6-1~ubuntu20.04.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-58016","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-58016","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-58016","date":"2026-10-08","epss":0.00993,"percentile":0.61445}],"risk":0.4965,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-58016"},"relatedVulnerabilities":[{"id":"CVE-2026-58016","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58016","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-58016","date":"2026-10-08","epss":0.00993,"percentile":0.61445}],"urls":["https://access.redhat.com/errata/RHSA-2026:42063","https://access.redhat.com/errata/RHSA-2026:42089","https://access.redhat.com/errata/RHSA-2026:42090","https://access.redhat.com/errata/RHSA-2026:44481","https://access.redhat.com/errata/RHSA-2026:46836","https://access.redhat.com/errata/RHSA-2026:49512","https://access.redhat.com/errata/RHSA-2026:51175","https://access.redhat.com/errata/RHSA-2026:51176","https://access.redhat.com/errata/RHSA-2026:51177","https://access.redhat.com/errata/RHSA-2026:51181","https://access.redhat.com/errata/RHSA-2026:51182","https://access.redhat.com/errata/RHSA-2026:51183","https://access.redhat.com/errata/RHSA-2026:51184","https://access.redhat.com/errata/RHSA-2026:51185","https://access.redhat.com/errata/RHSA-2026:53371","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:73909","https://access.redhat.com/errata/RHSA-2026:73959","https://access.redhat.com/errata/RHSA-2026:73960","https://access.redhat.com/errata/RHSA-2026:73961","https://access.redhat.com/errata/RHSA-2026:73962","https://access.redhat.com/errata/RHSA-2026:74458","https://access.redhat.com/errata/RHSA-2026:74459","https://access.redhat.com/errata/RHSA-2026:74460","https://access.redhat.com/errata/RHSA-2026:74461","https://access.redhat.com/errata/RHSA-2026:74462","https://access.redhat.com/errata/RHSA-2026:74463","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-58016","https://bugzilla.redhat.com/show_bug.cgi?id=2492257","https://gitlab.gnome.org/GNOME/glib/-/issues/3932"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58016","description":"A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.106"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-23hv-mwm6-g8jf","versionConstraint":">=9.0.0.M1,<9.0.106 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-23hv-mwm6-g8jf","fix":{"state":"fixed","versions":["9.0.106"],"available":[{"date":"2026-07-01","kind":"first-observed","version":"9.0.106"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-55668","cwe":"CWE-384","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-55668","date":"2026-10-08","epss":0.0086,"percentile":0.5725}],"risk":0.4945,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-55668","https://lists.apache.org/thread/v6bknr96rl7l1qxkl1c03v0qdvbbqs47","https://github.com/apache/tomcat/commit/8621e4c6ba2c916a41eb34cb0f781171ead33fb6","https://github.com/apache/tomcat/commit/90306d971bb8b8393336d893644124fb2ca11d21","https://github.com/apache/tomcat/commit/9c3673ba04009377cb0c81ccb6cf5078aec1aa95","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html","http://www.openwall.com/lists/oss-security/2025/08/13/3"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-23hv-mwm6-g8jf","description":"Apache Tomcat Session Fixation vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2025-55668","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-55668","cwe":"CWE-384","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-55668","date":"2026-10-08","epss":0.0086,"percentile":0.5725}],"urls":["https://lists.apache.org/thread/v6bknr96rl7l1qxkl1c03v0qdvbbqs47","http://www.openwall.com/lists/oss-security/2025/08/13/3"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-55668","description":"Session Fixation vulnerability in Apache Tomcat via rewrite valve.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105.\nOlder, EOL versions may also be affected.\n\nUsers are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue."}]},{"artifact":{"id":"3c96e5014ea74a87","cpes":["cpe:2.3:a:bouncycastle-org:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov_jdk15on:1.60:*:*:*:*:*:*:*"],"name":"bcprov-jdk15on","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.60","type":"java-archive","version":"1.60","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","manifestName":"","pomArtifactID":"bcprov-jdk15on","archiveDigests":[{"value":"bd47ad3bd14b8e82595c7adaa143501e60842a84","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.78"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-v435-xc8x-wvr9","versionConstraint":"<1.78 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bcprov-jdk15on","version":"1.60"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-v435-xc8x-wvr9","fix":{"state":"fixed","versions":["1.78"],"available":[{"date":"2024-05-15","kind":"first-observed","version":"1.78"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-30171","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-30171","date":"2026-10-08","epss":0.00901,"percentile":0.58483}],"risk":0.4910450000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-30171","https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171","https://www.bouncycastle.org/latest_releases.html","https://github.com/bcgit/bc-csharp/commit/c984b8bfd8544dfc55dba91a02cbbbb9c580c217","https://github.com/bcgit/bc-java/commit/d7d5e735abd64bf0f413f54fd9e495fc02400fb0","https://github.com/bcgit/bc-java/commit/e0569dcb1dea9d421d84fc4c5c5688fe101afa2d","https://security.netapp.com/advisory/ntap-20240614-0008"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-v435-xc8x-wvr9","description":"Bouncy Castle affected by timing side-channel for RSA key exchange (\"The Marvin Attack\")"},"relatedVulnerabilities":[{"id":"CVE-2024-30171","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-30171","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-30171","date":"2026-10-08","epss":0.00901,"percentile":0.58483}],"urls":["https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171","https://security.netapp.com/advisory/ntap-20240614-0008/","https://www.bouncycastle.org/latest_releases.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-30171","description":"An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.121"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-gcx9-497g-6cp6","versionConstraint":">=9.0.0-M1,<9.0.121 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-gcx9-497g-6cp6","fix":{"state":"fixed","versions":["9.0.121"],"available":[{"date":"2026-09-03","kind":"first-observed","version":"9.0.121"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65182","cwe":"CWE-284","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2026-65182","cwe":"CWE-863","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-65182","date":"2026-10-08","epss":0.00538,"percentile":0.4354}],"risk":0.48689000000000004,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-65182","https://lists.apache.org/thread/joosxvzc9b49ttj8lj0jw9mqt0ml767m","http://www.openwall.com/lists/oss-security/2026/08/26/1","https://github.com/apache/tomcat/commit/8bafd79a3b54684e80e9cb1bafd4746aede7d3f5","https://github.com/apache/tomcat/commit/b2c56ec8f20c66773a1a813034ffcdb60841f1cf","https://github.com/apache/tomcat/commit/b79752d2a8578d94743e2a95c50af297f780c0df","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-gcx9-497g-6cp6","description":"Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2026-65182","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-65182","cwe":"CWE-284","type":"Secondary","source":"security@apache.org"},{"cve":"CVE-2026-65182","cwe":"CWE-863","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-65182","date":"2026-10-08","epss":0.00538,"percentile":0.4354}],"urls":["https://lists.apache.org/thread/joosxvzc9b49ttj8lj0jw9mqt0ml767m","http://www.openwall.com/lists/oss-security/2026/08/26/1"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-65182","description":"Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109.\n\n\n\nUsers are recommended to upgrade to version 11.0.25, 10.1.58, 9.0.121, which fixes the issue."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-21945","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-21945","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-21945","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-21945","cwe":"CWE-295","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-21945","date":"2026-10-08","epss":0.0097,"percentile":0.60726}],"risk":0.485,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-21945"},"relatedVulnerabilities":[{"id":"CVE-2026-21945","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-21945","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-21945","cwe":"CWE-295","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-21945","date":"2026-10-08","epss":0.0097,"percentile":0.60726}],"urls":["https://www.oracle.com/security-alerts/cpujan2026.html","https://access.redhat.com/errata/RHSA-2026:0847","https://access.redhat.com/errata/RHSA-2026:0848","https://access.redhat.com/errata/RHSA-2026:0895","https://access.redhat.com/errata/RHSA-2026:0897","https://access.redhat.com/errata/RHSA-2026:0899","https://access.redhat.com/errata/RHSA-2026:0901","https://access.redhat.com/errata/RHSA-2026:0927","https://access.redhat.com/errata/RHSA-2026:0928","https://access.redhat.com/errata/RHSA-2026:0931","https://access.redhat.com/errata/RHSA-2026:0932","https://access.redhat.com/errata/RHSA-2026:0933","https://access.redhat.com/errata/RHSA-2026:1606","https://access.redhat.com/errata/RHSA-2026:4832","https://access.redhat.com/security/cve/CVE-2026-21945","https://bugzilla.redhat.com/show_bug.cgi?id=2429927","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21945.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-21945","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."}]},{"artifact":{"id":"f6d59748713e2bd6","cpes":["cpe:2.3:a:libcups2:libcups2:2.3.1-9ubuntu1.6:*:*:*:*:*:*:*"],"name":"libcups2","purl":"pkg:deb/ubuntu/libcups2@2.3.1-9ubuntu1.6?arch=amd64&distro=ubuntu-20.04&upstream=cups","type":"deb","version":"2.3.1-9ubuntu1.6","language":"","licenses":["Apache-2.0","Apache-2.0-with-GPL2-LGPL2-Exception","BSD-3-clause","FSFUL","Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcups2/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libcups2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcups2:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libcups2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cups"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-58060","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"cups","version":"2.3.1-9ubuntu1.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-58060","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-58060","cwe":"CWE-287","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-58060","date":"2026-10-08","epss":0.00968,"percentile":0.60662}],"risk":0.484,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-58060"},"relatedVulnerabilities":[{"id":"CVE-2025-58060","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":8,"impactScore":5.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-58060","cwe":"CWE-287","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2025-58060","date":"2026-10-08","epss":0.00968,"percentile":0.60662}],"urls":["https://github.com/OpenPrinting/cups/commit/595d691075b1d396d2edfaa0a8fd0873a0a1f221","https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq","http://www.openwall.com/lists/oss-security/2025/09/11/1","https://lists.debian.org/debian-lts-announce/2025/09/msg00013.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-58060","description":"OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password is not checked. This results in authentication bypass. Any configuration that allows an `AuthType` that is not `Basic` is affected. Version 2.4.13 fixes the issue."}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4806","versionConstraint":"< 2.31-0ubuntu9.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-4806","fix":{"state":"fixed","versions":["2.31-0ubuntu9.14"],"available":[{"date":"2023-12-07","kind":"advisory","version":"2.31-0ubuntu9.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4806","date":"2026-10-08","epss":0.01606,"percentile":0.75144}],"risk":0.4818,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-4806"},"relatedVulnerabilities":[{"id":"CVE-2023-4806","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4806","date":"2026-10-08","epss":0.01606,"percentile":0.75144}],"urls":["https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4806","https://bugzilla.redhat.com/show_bug.cgi?id=2237782","http://www.openwall.com/lists/oss-security/2023/10/03/4","http://www.openwall.com/lists/oss-security/2023/10/03/5","http://www.openwall.com/lists/oss-security/2023/10/03/6","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/","https://security.gentoo.org/glsa/202310-03","https://security.netapp.com/advisory/ntap-20240125-0008/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-831302.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4806","description":"A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4806","versionConstraint":"< 2.31-0ubuntu9.14 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-4806","fix":{"state":"fixed","versions":["2.31-0ubuntu9.14"],"available":[{"date":"2023-12-07","kind":"advisory","version":"2.31-0ubuntu9.14"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4806","date":"2026-10-08","epss":0.01606,"percentile":0.75144}],"risk":0.4818,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-4806"},"relatedVulnerabilities":[{"id":"CVE-2023-4806","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-4806","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4806","date":"2026-10-08","epss":0.01606,"percentile":0.75144}],"urls":["https://access.redhat.com/errata/RHSA-2023:5453","https://access.redhat.com/errata/RHSA-2023:5455","https://access.redhat.com/errata/RHSA-2023:7409","https://access.redhat.com/security/cve/CVE-2023-4806","https://bugzilla.redhat.com/show_bug.cgi?id=2237782","http://www.openwall.com/lists/oss-security/2023/10/03/4","http://www.openwall.com/lists/oss-security/2023/10/03/5","http://www.openwall.com/lists/oss-security/2023/10/03/6","http://www.openwall.com/lists/oss-security/2023/10/03/8","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/","https://security.gentoo.org/glsa/202310-03","https://security.netapp.com/advisory/ntap-20240125-0008/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-831302.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4806","description":"A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.118"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-fv25-8xcx-gqjc","versionConstraint":"<9.0.118 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-fv25-8xcx-gqjc","fix":{"state":"fixed","versions":["9.0.118"],"available":[{"date":"2026-05-19","kind":"first-observed","version":"9.0.118"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42498","cwe":"CWE-200","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-42498","date":"2026-10-08","epss":0.00646,"percentile":0.49353}],"risk":0.47803999999999996,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-42498","https://lists.apache.org/thread/n61zwf75jrv09rz90j4jssncm244bwdb","http://www.openwall.com/lists/oss-security/2026/05/12/14","https://github.com/apache/tomcat/commit/169d725788ea6aec217ecac70fe4161c837ba423","https://github.com/apache/tomcat/commit/6cbe274592ef2d11607b5b188e1df649de52f8d5","https://github.com/apache/tomcat/commit/b7b173694d588ddcfa432f079baf763cbbbaa5c4","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-fv25-8xcx-gqjc","description":"Apache Tomcat - WebSocket authentication header exposure"},"relatedVulnerabilities":[{"id":"CVE-2026-42498","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42498","cwe":"CWE-200","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-42498","date":"2026-10-08","epss":0.00646,"percentile":0.49353}],"urls":["https://lists.apache.org/thread/n61zwf75jrv09rz90j4jssncm244bwdb","http://www.openwall.com/lists/oss-security/2026/05/12/14"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42498","description":"Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.2 through 9.0.117, from 8.5.24 through 8.5.100, from 7.0.83 through 7.0.109.\n\nUsers are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118, which fix the issue."}]},{"artifact":{"id":"3c96e5014ea74a87","cpes":["cpe:2.3:a:bouncycastle-org:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov_jdk15on:1.60:*:*:*:*:*:*:*"],"name":"bcprov-jdk15on","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.60","type":"java-archive","version":"1.60","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","manifestName":"","pomArtifactID":"bcprov-jdk15on","archiveDigests":[{"value":"bd47ad3bd14b8e82595c7adaa143501e60842a84","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.61"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-72m5-fvvv-55m6","versionConstraint":"<1.61 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bcprov-jdk15on","version":"1.60"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-72m5-fvvv-55m6","fix":{"state":"fixed","versions":["1.61"],"available":[{"date":"2024-03-15","kind":"first-observed","version":"1.61"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-26939","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-26939","date":"2026-10-08","epss":0.00925,"percentile":0.59239}],"risk":0.476375,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2020-26939","https://github.com/bcgit/bc-java/commit/930f8b274c4f1f3a46e68b5441f1e7fadb57e8c1","https://github.com/bcgit/bc-java/wiki/CVE-2020-26939","https://lists.debian.org/debian-lts-announce/2020/11/msg00007.html","https://lists.apache.org/thread.html/r8c36ba34e80e05eecb1f80071cc834d705616f315b634ec0c7d8f42e@%3Cissues.solr.apache.org%3E","https://security.netapp.com/advisory/ntap-20201202-0005","https://lists.apache.org/thread.html/r8c36ba34e80e05eecb1f80071cc834d705616f315b634ec0c7d8f42e%40%3Cissues.solr.apache.org%3E"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-72m5-fvvv-55m6","description":"Observable Differences in Behavior to Error Inputs in Bouncy Castle"},"relatedVulnerabilities":[{"id":"CVE-2020-26939","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-26939","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-26939","date":"2026-10-08","epss":0.00925,"percentile":0.59239}],"urls":["https://github.com/bcgit/bc-java/wiki/CVE-2020-26939","https://lists.apache.org/thread.html/r8c36ba34e80e05eecb1f80071cc834d705616f315b634ec0c7d8f42e%40%3Cissues.solr.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-26939","description":"In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponent because of Observable Differences in Behavior to Error Inputs. This occurs in org.bouncycastle.crypto.encodings.OAEPEncoding. Sending invalid ciphertext that decrypts to a short payload in the OAEP Decoder could result in the throwing of an early exception, potentially leaking some information about the private exponent of the RSA private key performing the encryption."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5260","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-5260","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-5260","cwe":"CWE-126","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-5260","date":"2026-10-08","epss":0.00945,"percentile":0.59888}],"risk":0.47250000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-5260"},"relatedVulnerabilities":[{"id":"CVE-2026-5260","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5260","cwe":"CWE-126","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-5260","date":"2026-10-08","epss":0.00945,"percentile":0.59888}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:67837","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-5260","https://bugzilla.redhat.com/show_bug.cgi?id=2467450","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-10"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5260","description":"A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42010","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-42010","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-42010","cwe":"CWE-170","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-42010","cwe":"CWE-626","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-42010","cwe":"CWE-170","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42010","date":"2026-10-08","epss":0.00944,"percentile":0.59864}],"risk":0.47200000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42010"},"relatedVulnerabilities":[{"id":"CVE-2026-42010","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42010","cwe":"CWE-170","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-42010","cwe":"CWE-626","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-42010","cwe":"CWE-170","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-42010","date":"2026-10-08","epss":0.00944,"percentile":0.59864}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:34764","https://access.redhat.com/errata/RHSA-2026:34788","https://access.redhat.com/errata/RHSA-2026:34790","https://access.redhat.com/errata/RHSA-2026:36004","https://access.redhat.com/errata/RHSA-2026:36005","https://access.redhat.com/errata/RHSA-2026:36006","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:62409","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:67857","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-42010","https://bugzilla.redhat.com/show_bug.cgi?id=2467289","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-4","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42010.json"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42010","description":"A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.12+7-1ubuntu2~20.04"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-21140","versionConstraint":"< 17.0.12+7-1ubuntu2~20.04 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-21140","fix":{"state":"fixed","versions":["17.0.12+7-1ubuntu2~20.04"],"available":[{"date":"2024-07-31","kind":"advisory","version":"17.0.12+7-1ubuntu2~20.04"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-21140","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21140","date":"2026-10-08","epss":0.0094,"percentile":0.59747}],"risk":0.47000000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-21140"},"relatedVulnerabilities":[{"id":"CVE-2024-21140","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21140","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21140","date":"2026-10-08","epss":0.0094,"percentile":0.59747}],"urls":["https://security.netapp.com/advisory/ntap-20240719-0008/","https://www.oracle.com/security-alerts/cpujul2024.html","https://openjdk.org/groups/vulnerability/advisories/2024-07-16"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21140","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.13+11-2ubuntu1~20.04"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-21235","versionConstraint":"< 17.0.13+11-2ubuntu1~20.04 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-21235","fix":{"state":"fixed","versions":["17.0.13+11-2ubuntu1~20.04"],"available":[{"date":"2024-11-11","kind":"advisory","version":"17.0.13+11-2ubuntu1~20.04"}]},"cvss":[],"epss":[{"cve":"CVE-2024-21235","date":"2026-10-08","epss":0.00929,"percentile":0.59384}],"risk":0.46449999999999997,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-21235"},"relatedVulnerabilities":[{"id":"CVE-2024-21235","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-21235","date":"2026-10-08","epss":0.00929,"percentile":0.59384}],"urls":["https://www.oracle.com/security-alerts/cpuoct2024.html","https://lists.debian.org/debian-lts-announce/2024/10/msg00018.html","https://lists.debian.org/debian-lts-announce/2024/10/msg00020.html","https://openjdk.org/groups/vulnerability/advisories/2024-10-15"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21235","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42015","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-42015","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-42015","cwe":"CWE-193","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-42015","date":"2026-10-08","epss":0.0092,"percentile":0.59061}],"risk":0.45999999999999996,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42015"},"relatedVulnerabilities":[{"id":"CVE-2026-42015","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42015","cwe":"CWE-193","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-42015","date":"2026-10-08","epss":0.0092,"percentile":0.59061}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-42015","https://bugzilla.redhat.com/show_bug.cgi?id=2467678","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-11"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42015","description":"A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts."}]},{"artifact":{"id":"6d4864e4cd2115b0","cpes":["cpe:2.3:a:apache:log4j-api:2.17.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:log4j_api:2.17.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:log4j:2.17.2:*:*:*:*:*:*:*","cpe:2.3:a:apache:api:2.17.2:*:*:*:*:*:*:*"],"name":"log4j-api","purl":"pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2","type":"java-archive","version":"2.17.2","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.logging.log4j","virtualPath":"/usr/lib/unifi/lib/log4j-api-2.17.2.jar","manifestName":"","pomArtifactID":"log4j-api","archiveDigests":[{"value":"f42d6afa111b4dec5d2aea0fe2197240749a4ea6","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/log4j-api-2.17.2.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/log4j-api-2.17.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.25.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qv9r-c865-cp47","versionConstraint":">=2.13.1,<2.25.5 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.logging.log4j:log4j-api","version":"2.17.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-qv9r-c865-cp47","fix":{"state":"fixed","versions":["2.25.5"],"available":[{"date":"2026-08-14","kind":"first-observed","version":"2.25.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49844","cwe":"CWE-116","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-49844","date":"2026-10-08","epss":0.00813,"percentile":0.55707}],"risk":0.459345,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-49844","https://github.com/apache/logging-log4j2/pull/4163","https://logging.apache.org/cyclonedx/vdr.xml","https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message","https://logging.apache.org/security.html#CVE-2026-49844","https://github.com/apache/logging-log4j2/commit/19edb23e162d6c728a8c2221a240037d389ed300","https://github.com/apache/logging-log4j2/commit/feadf8eb0b4acb6ddfa4c0ab2bbc6d88b8e12d82","https://github.com/apache/logging-log4j2/releases/tag/rel/2.25.5","https://github.com/apache/logging-log4j2/releases/tag/rel/2.26.1"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qv9r-c865-cp47","description":"Apache Log4j API: Improper encoding of non-finite floating-point values during MapMessage JSON serialization"},"relatedVulnerabilities":[{"id":"CVE-2026-49844","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@apache.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49844","cwe":"CWE-116","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-49844","date":"2026-10-08","epss":0.00813,"percentile":0.55707}],"urls":["https://github.com/apache/logging-log4j2/pull/4163","https://logging.apache.org/cyclonedx/vdr.xml","https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message","https://logging.apache.org/security.html#CVE-2026-49844"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-49844","description":"Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue affects Apache Log4j API versions 2.13.1 through 2.25.4 and version 2.26.0.\n\nThe fix for CVE-2026-34481 did not cover all code paths: when a MapMessage contains a non-finite IEEE 754 value (NaN, Infinity, or -Infinity), MapMessage.asJson() emits the corresponding bare token. RFC 8259 does not permit these tokens, so a conformant parser rejects the resulting document.\n\nThe defect is reachable only when both of the following conditions hold:\n\n  *  The application uses the  message resolver https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message  of JsonTemplateLayout or any other layout that relies on MapMessage.asJson() or MapMessage.getFormattedMessage(new String[]{\"JSON\"}).\n  *  The application logs a MapMessage that contains an attacker-controlled floating-point value.\n\n\nAn attacker who can supply a non-finite value can cause the affected layout to emit malformed JSON, which may corrupt the enclosing log record or disrupt downstream log ingestion and parsing.\n\nUsers are advised to upgrade to Apache Log4j API 2.25.5 or 2.26.1, both of which emit RFC 8259-compliant JSON for non-finite values."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.10+7-1~20.04.1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-20918","versionConstraint":"< 17.0.10+7-1~20.04.1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-20918","fix":{"state":"fixed","versions":["17.0.10+7-1~20.04.1"],"available":[{"date":"2024-02-27","kind":"advisory","version":"17.0.10+7-1~20.04.1"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-20918","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-20918","date":"2026-10-08","epss":0.00918,"percentile":0.5903}],"risk":0.459,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-20918"},"relatedVulnerabilities":[{"id":"CVE-2024-20918","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-20918","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-20918","date":"2026-10-08","epss":0.00918,"percentile":0.5903}],"urls":["https://lists.debian.org/debian-lts-announce/2024/01/msg00023.html","https://security.netapp.com/advisory/ntap-20240201-0002/","https://www.oracle.com/security-alerts/cpujan2024.html","https://security.netapp.com/advisory/ntap-20241108-0002/","https://openjdk.org/groups/vulnerability/advisories/2024-01-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-20918","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.10+7-1~20.04.1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-20952","versionConstraint":"< 17.0.10+7-1~20.04.1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-20952","fix":{"state":"fixed","versions":["17.0.10+7-1~20.04.1"],"available":[{"date":"2024-02-27","kind":"advisory","version":"17.0.10+7-1~20.04.1"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-20952","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2024-20952","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-20952","date":"2026-10-08","epss":0.00918,"percentile":0.5903}],"risk":0.459,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-20952"},"relatedVulnerabilities":[{"id":"CVE-2024-20952","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-20952","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2024-20952","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-20952","date":"2026-10-08","epss":0.00918,"percentile":0.5903}],"urls":["https://lists.debian.org/debian-lts-announce/2024/01/msg00023.html","https://security.netapp.com/advisory/ntap-20240201-0002/","https://www.oracle.com/security-alerts/cpujan2024.html","https://security.netapp.com/advisory/ntap-20241108-0002/","https://openjdk.org/groups/vulnerability/advisories/2024-01-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-20952","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63072","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-63072","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-08","epss":0.00916,"percentile":0.58982}],"risk":0.45799999999999996,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-63072"},"relatedVulnerabilities":[{"id":"CVE-2026-63072","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-08","epss":0.00916,"percentile":0.58982}],"urls":["https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756","https://github.com/openssl/openssl/commit/87784ad619af36b8807c2044b3940006fccc1e42","https://github.com/openssl/openssl/commit/9530a5fd1aacaeccdced4478ea2340a480613335","https://github.com/openssl/openssl/commit/9ec2f6d2ae2bcad907cf7ee38584855bafe4979a","https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63072","description":"Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based\non querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive\ncan write and cleanse more bytes than that query reports, causing an 8-byte\nout-of-bounds heap write.\n\nImpact summary: An attacker who supplies a crafted CMS message can trigger a\ndeterministic 8-byte out-of-bounds heap write when the victim decrypts it\nwith CMS_decrypt(), corrupting the heap and typically resulting in a Denial\nof Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: The key-wrap OID is potentially attacker-controlled on the wire.\nCMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers.\nAn attacker can take a legitimate message and change a single OID byte to\nselect the padded variant while leaving the message otherwise valid. Since\nthe unwrap key is derived from the recipient's private operation (ECDH key\nagreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot\npass, and the decryption fails with integrity failure.\n\nThe write is a fixed-size (8-byte), fixed-value (zero) heap overflow\nimmediately past the allocation, requires no special configuration, and is\nreachable from the public CMS_decrypt() function. The consequence is\na heap corruption leading to a Denial of Service. The fix in the CMS code\nsizes the unwrap output buffer for the worst case so a failed unwrap cannot\nwrite past the allocation.\n\nFIPS impact: no\n\nAs the CMS code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-63072","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-63072","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-08","epss":0.00916,"percentile":0.58982}],"risk":0.45799999999999996,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-63072"},"relatedVulnerabilities":[{"id":"CVE-2026-63072","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-08","epss":0.00916,"percentile":0.58982}],"urls":["https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756","https://github.com/openssl/openssl/commit/87784ad619af36b8807c2044b3940006fccc1e42","https://github.com/openssl/openssl/commit/9530a5fd1aacaeccdced4478ea2340a480613335","https://github.com/openssl/openssl/commit/9ec2f6d2ae2bcad907cf7ee38584855bafe4979a","https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63072","description":"Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based\non querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive\ncan write and cleanse more bytes than that query reports, causing an 8-byte\nout-of-bounds heap write.\n\nImpact summary: An attacker who supplies a crafted CMS message can trigger a\ndeterministic 8-byte out-of-bounds heap write when the victim decrypts it\nwith CMS_decrypt(), corrupting the heap and typically resulting in a Denial\nof Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: The key-wrap OID is potentially attacker-controlled on the wire.\nCMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers.\nAn attacker can take a legitimate message and change a single OID byte to\nselect the padded variant while leaving the message otherwise valid. Since\nthe unwrap key is derived from the recipient's private operation (ECDH key\nagreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot\npass, and the decryption fails with integrity failure.\n\nThe write is a fixed-size (8-byte), fixed-value (zero) heap overflow\nimmediately past the allocation, requires no special configuration, and is\nreachable from the public CMS_decrypt() function. The consequence is\na heap corruption leading to a Denial of Service. The fix in the CMS code\nsizes the unwrap output buffer for the worst case so a failed unwrap cannot\nwrite past the allocation.\n\nFIPS impact: no\n\nAs the CMS code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.11+9-1~20.04.2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-21012","versionConstraint":"< 17.0.11+9-1~20.04.2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-21012","fix":{"state":"fixed","versions":["17.0.11+9-1~20.04.2"],"available":[{"date":"2024-06-06","kind":"advisory","version":"17.0.11+9-1~20.04.2"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-21012","cwe":"CWE-276","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21012","date":"2026-10-08","epss":0.0091,"percentile":0.58746}],"risk":0.455,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-21012"},"relatedVulnerabilities":[{"id":"CVE-2024-21012","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21012","cwe":"CWE-276","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21012","date":"2026-10-08","epss":0.0091,"percentile":0.58746}],"urls":["https://lists.debian.org/debian-lts-announce/2024/04/msg00014.html","https://security.netapp.com/advisory/ntap-20240426-0004/","https://www.oracle.com/security-alerts/cpuapr2024.html","https://openjdk.org/groups/vulnerability/advisories/2024-04-16"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21012","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"c9a07c3b9df49ddb","cpes":["cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0-0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*"],"name":"libglib2.0-0","purl":"pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.6?arch=amd64&distro=ubuntu-20.04&upstream=glib2.0","type":"deb","version":"2.64.6-1~ubuntu20.04.6","language":"","licenses":["sha256:f65e92234e97932114d94d72fc898fcddc854345f77caae80af26ad5cd94cce8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libglib2.0-0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libglib2.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glib2.0"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-58015","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glib2.0","version":"2.64.6-1~ubuntu20.04.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-58015","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-58015","cwe":"CWE-22","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-58015","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-58015","date":"2026-10-08","epss":0.00908,"percentile":0.58707}],"risk":0.45399999999999996,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-58015"},"relatedVulnerabilities":[{"id":"CVE-2026-58015","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58015","cwe":"CWE-22","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-58015","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-58015","date":"2026-10-08","epss":0.00908,"percentile":0.58707}],"urls":["https://access.redhat.com/errata/RHSA-2026:49512","https://access.redhat.com/errata/RHSA-2026:55440","https://access.redhat.com/errata/RHSA-2026:57015","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:61766","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:63135","https://access.redhat.com/errata/RHSA-2026:63138","https://access.redhat.com/errata/RHSA-2026:63140","https://access.redhat.com/errata/RHSA-2026:65762","https://access.redhat.com/errata/RHSA-2026:65763","https://access.redhat.com/errata/RHSA-2026:65767","https://access.redhat.com/errata/RHSA-2026:65768","https://access.redhat.com/errata/RHSA-2026:65769","https://access.redhat.com/errata/RHSA-2026:65770","https://access.redhat.com/errata/RHSA-2026:65771","https://access.redhat.com/errata/RHSA-2026:65773","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:66357","https://access.redhat.com/errata/RHSA-2026:70646","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:73859","https://access.redhat.com/errata/RHSA-2026:73909","https://access.redhat.com/errata/RHSA-2026:73929","https://access.redhat.com/errata/RHSA-2026:73930","https://access.redhat.com/errata/RHSA-2026:73959","https://access.redhat.com/errata/RHSA-2026:73960","https://access.redhat.com/errata/RHSA-2026:73961","https://access.redhat.com/errata/RHSA-2026:73962","https://access.redhat.com/errata/RHSA-2026:74458","https://access.redhat.com/errata/RHSA-2026:74459","https://access.redhat.com/errata/RHSA-2026:74460","https://access.redhat.com/errata/RHSA-2026:74461","https://access.redhat.com/errata/RHSA-2026:74462","https://access.redhat.com/errata/RHSA-2026:74463","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:74677","https://access.redhat.com/errata/RHSA-2026:74678","https://access.redhat.com/errata/RHSA-2026:74679","https://access.redhat.com/errata/RHSA-2026:74681","https://access.redhat.com/errata/RHSA-2026:74683","https://access.redhat.com/errata/RHSA-2026:74685","https://access.redhat.com/errata/RHSA-2026:74687","https://access.redhat.com/errata/RHSA-2026:74688","https://access.redhat.com/errata/RHSA-2026:74771","https://access.redhat.com/errata/RHSA-2026:75652","https://access.redhat.com/errata/RHSA-2026:75654","https://access.redhat.com/errata/RHSA-2026:75655","https://access.redhat.com/errata/RHSA-2026:75657","https://access.redhat.com/errata/RHSA-2026:75658","https://access.redhat.com/errata/RHSA-2026:75659","https://access.redhat.com/errata/RHSA-2026:75660","https://access.redhat.com/errata/RHSA-2026:76042","https://access.redhat.com/security/cve/CVE-2026-58015","https://bugzilla.redhat.com/show_bug.cgi?id=2492256","https://gitlab.gnome.org/GNOME/glib/-/issues/3931"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58015","description":"A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-3833","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-3833","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-3833","cwe":"CWE-178","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3833","date":"2026-10-08","epss":0.00892,"percentile":0.58203}],"risk":0.44600000000000006,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-3833"},"relatedVulnerabilities":[{"id":"CVE-2026-3833","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3833","cwe":"CWE-178","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3833","date":"2026-10-08","epss":0.00892,"percentile":0.58203}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:57402","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:62409","https://access.redhat.com/errata/RHSA-2026:62549","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:65851","https://access.redhat.com/errata/RHSA-2026:67857","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-3833","https://bugzilla.redhat.com/show_bug.cgi?id=2445763","https://gitlab.com/gnutls/gnutls/-/issues/1803"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3833","description":"A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure."}]},{"artifact":{"id":"b9071b89f9d9d9d3","cpes":["cpe:2.3:a:libnghttp2-14:libnghttp2-14:1.40.0-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2-14:libnghttp2_14:1.40.0-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2_14:libnghttp2-14:1.40.0-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2_14:libnghttp2_14:1.40.0-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2:libnghttp2-14:1.40.0-1ubuntu0.2:*:*:*:*:*:*:*","cpe:2.3:a:libnghttp2:libnghttp2_14:1.40.0-1ubuntu0.2:*:*:*:*:*:*:*"],"name":"libnghttp2-14","purl":"pkg:deb/ubuntu/libnghttp2-14@1.40.0-1ubuntu0.2?arch=amd64&distro=ubuntu-20.04&upstream=nghttp2","type":"deb","version":"1.40.0-1ubuntu0.2","language":"","licenses":["BSD-2-clause","Expat","GPL-3","GPL-3+","MIT","SIL-OFL-1.1","all-permissive"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libnghttp2-14/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libnghttp2-14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libnghttp2-14:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libnghttp2-14:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"nghttp2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-27135","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"nghttp2","version":"1.40.0-1ubuntu0.2"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-27135","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-27135","cwe":"CWE-617","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-27135","cwe":"CWE-617","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-27135","date":"2026-10-08","epss":0.00892,"percentile":0.58186}],"risk":0.44600000000000006,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-27135"},"relatedVulnerabilities":[{"id":"CVE-2026-27135","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-27135","cwe":"CWE-617","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-27135","cwe":"CWE-617","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-27135","date":"2026-10-08","epss":0.00892,"percentile":0.58186}],"urls":["https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1","https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6","http://www.openwall.com/lists/oss-security/2026/03/20/3","https://lists.debian.org/debian-lts-announce/2026/05/msg00025.html","https://access.redhat.com/errata/RHSA-2026:10065","https://access.redhat.com/errata/RHSA-2026:11768","https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:14773","https://access.redhat.com/errata/RHSA-2026:14937","https://access.redhat.com/errata/RHSA-2026:15087","https://access.redhat.com/errata/RHSA-2026:16008","https://access.redhat.com/errata/RHSA-2026:16009","https://access.redhat.com/errata/RHSA-2026:16030","https://access.redhat.com/errata/RHSA-2026:16174","https://access.redhat.com/errata/RHSA-2026:17596","https://access.redhat.com/errata/RHSA-2026:19724","https://access.redhat.com/errata/RHSA-2026:19725","https://access.redhat.com/errata/RHSA-2026:20040","https://access.redhat.com/errata/RHSA-2026:20087","https://access.redhat.com/errata/RHSA-2026:21656","https://access.redhat.com/errata/RHSA-2026:21690","https://access.redhat.com/errata/RHSA-2026:21695","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:27200","https://access.redhat.com/errata/RHSA-2026:27201","https://access.redhat.com/errata/RHSA-2026:6190","https://access.redhat.com/errata/RHSA-2026:7080","https://access.redhat.com/errata/RHSA-2026:7123","https://access.redhat.com/errata/RHSA-2026:7302","https://access.redhat.com/errata/RHSA-2026:7310","https://access.redhat.com/errata/RHSA-2026:7350","https://access.redhat.com/errata/RHSA-2026:7666","https://access.redhat.com/errata/RHSA-2026:7667","https://access.redhat.com/errata/RHSA-2026:7668","https://access.redhat.com/errata/RHSA-2026:7670","https://access.redhat.com/errata/RHSA-2026:7675","https://access.redhat.com/errata/RHSA-2026:7896","https://access.redhat.com/errata/RHSA-2026:7983","https://access.redhat.com/errata/RHSA-2026:8339","https://access.redhat.com/errata/RHSA-2026:8538","https://access.redhat.com/errata/RHSA-2026:8539","https://access.redhat.com/errata/RHSA-2026:8540","https://access.redhat.com/errata/RHSA-2026:8541","https://access.redhat.com/errata/RHSA-2026:8545","https://access.redhat.com/errata/RHSA-2026:8546","https://access.redhat.com/errata/RHSA-2026:8547","https://access.redhat.com/errata/RHSA-2026:8548","https://access.redhat.com/errata/RHSA-2026:8868","https://access.redhat.com/errata/RHSA-2026:9711","https://access.redhat.com/errata/RHSA-2026:9832","https://access.redhat.com/errata/RHSA-2026:9874","https://access.redhat.com/security/cve/CVE-2026-27135","https://bugzilla.redhat.com/show_bug.cgi?id=2448754","https://cert-portal.siemens.com/productcert/html/ssa-019113.html","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-27135","description":"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-34282","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-34282","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-34282","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-34282","cwe":"CWE-835","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-34282","date":"2026-10-08","epss":0.00891,"percentile":0.58162}],"risk":0.44549999999999995,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-34282"},"relatedVulnerabilities":[{"id":"CVE-2026-34282","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34282","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-34282","cwe":"CWE-835","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-34282","date":"2026-10-08","epss":0.00891,"percentile":0.58162}],"urls":["https://www.oracle.com/security-alerts/cpuapr2026.html","https://access.redhat.com/errata/RHSA-2026:11403","https://access.redhat.com/errata/RHSA-2026:11655","https://access.redhat.com/errata/RHSA-2026:11822","https://access.redhat.com/errata/RHSA-2026:11829","https://access.redhat.com/errata/RHSA-2026:11902","https://access.redhat.com/errata/RHSA-2026:22328","https://access.redhat.com/errata/RHSA-2026:9254","https://access.redhat.com/errata/RHSA-2026:9686","https://access.redhat.com/errata/RHSA-2026:9687","https://access.redhat.com/errata/RHSA-2026:9688","https://access.redhat.com/errata/RHSA-2026:9689","https://access.redhat.com/errata/RHSA-2026:9691","https://access.redhat.com/errata/RHSA-2026:9693","https://access.redhat.com/errata/RHSA-2026:9694","https://access.redhat.com/security/cve/CVE-2026-34282","https://bugzilla.redhat.com/show_bug.cgi?id=2460044","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34282.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34282","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-33845","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-33845","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-33845","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33845","cwe":"CWE-191","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33845","date":"2026-10-08","epss":0.00886,"percentile":0.58022}],"risk":0.443,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-33845"},"relatedVulnerabilities":[{"id":"CVE-2026-33845","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-33845","cwe":"CWE-191","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-33845","cwe":"CWE-191","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-33845","date":"2026-10-08","epss":0.00886,"percentile":0.58022}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:34372","https://access.redhat.com/errata/RHSA-2026:36004","https://access.redhat.com/errata/RHSA-2026:36005","https://access.redhat.com/errata/RHSA-2026:36006","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:56786","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:56911","https://access.redhat.com/errata/RHSA-2026:57402","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-33845","https://bugzilla.redhat.com/show_bug.cgi?id=2450624","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33845.json"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-33845","description":"A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service."}]},{"artifact":{"id":"115f8756a931640f","cpes":["cpe:2.3:a:org.springframework:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_web:5.3.22:*:*:*:*:*:*:*"],"name":"spring-web","purl":"pkg:maven/org.springframework/spring-web@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","manifestName":"","pomArtifactID":"spring-web","archiveDigests":[{"value":"fdab9b8d8df2e6a8fb90f2481c361bcf2c129567","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"5.3.38"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2rmj-mq67-h97g","versionConstraint":"<5.3.38 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-web","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-2rmj-mq67-h97g","fix":{"state":"fixed","versions":["5.3.38"],"available":[{"date":"2024-09-25","kind":"first-observed","version":"5.3.38"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38809","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38809","date":"2026-10-08","epss":0.00852,"percentile":0.56965}],"risk":0.43878,"urls":["https://github.com/spring-projects/spring-framework/issues/33372","https://github.com/spring-projects/spring-framework/commit/582bfccbb72e5c8959a0b472d1dc7d03a20520f3","https://github.com/spring-projects/spring-framework/commit/8d16a50907c11f7e6b407d878a26e84eba08a533","https://github.com/spring-projects/spring-framework/commit/bb17ad8314b81850a939fd265fb53b3361705e85","https://spring.io/security/cve-2024-38809","https://nvd.nist.gov/vuln/detail/CVE-2024-38809"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2rmj-mq67-h97g","description":"Spring Framework DoS via conditional HTTP request"},"relatedVulnerabilities":[{"id":"CVE-2024-38809","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38809","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38809","date":"2026-10-08","epss":0.00852,"percentile":0.56965}],"urls":["https://spring.io/security/cve-2024-38809","https://security.netapp.com/advisory/ntap-20240920-0003/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-38809","description":"Applications that parse ETags from \"If-Match\" or \"If-None-Match\" request headers are vulnerable to DoS attack.\n\nUsers of affected versions should upgrade to the corresponding fixed version.\n\nUsers of older, unsupported versions could enforce a size limit on \"If-Match\" and \"If-None-Match\" headers, e.g. through a Filter."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.10+7-1~20.04.1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-20921","versionConstraint":"< 17.0.10+7-1~20.04.1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-20921","fix":{"state":"fixed","versions":["17.0.10+7-1~20.04.1"],"available":[{"date":"2024-02-27","kind":"advisory","version":"17.0.10+7-1~20.04.1"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-20921","cwe":"CWE-276","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-20921","date":"2026-10-08","epss":0.00864,"percentile":0.57356}],"risk":0.432,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-20921"},"relatedVulnerabilities":[{"id":"CVE-2024-20921","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-20921","cwe":"CWE-276","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-20921","date":"2026-10-08","epss":0.00864,"percentile":0.57356}],"urls":["https://www.oracle.com/security-alerts/cpujan2024.html","https://security.netapp.com/advisory/ntap-20240201-0002/","https://security.netapp.com/advisory/ntap-20241108-0002/","https://openjdk.org/groups/vulnerability/advisories/2024-01-16"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-20921","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.12+7-1ubuntu2~20.04"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-21145","versionConstraint":"< 17.0.12+7-1ubuntu2~20.04 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-21145","fix":{"state":"fixed","versions":["17.0.12+7-1ubuntu2~20.04"],"available":[{"date":"2024-07-31","kind":"advisory","version":"17.0.12+7-1ubuntu2~20.04"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-21145","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21145","date":"2026-10-08","epss":0.00864,"percentile":0.57346}],"risk":0.432,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-21145"},"relatedVulnerabilities":[{"id":"CVE-2024-21145","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21145","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21145","date":"2026-10-08","epss":0.00864,"percentile":0.57346}],"urls":["https://security.netapp.com/advisory/ntap-20240719-0008/","https://www.oracle.com/security-alerts/cpujul2024.html","https://openjdk.org/groups/vulnerability/advisories/2024-07-16"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21145","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.121"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-h3x4-894j-xpx5","versionConstraint":">=9.0.0-M1,<9.0.121 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-h3x4-894j-xpx5","fix":{"state":"fixed","versions":["9.0.121"],"available":[{"date":"2026-09-03","kind":"first-observed","version":"9.0.121"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-68525","cwe":"CWE-863","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-68525","date":"2026-10-08","epss":0.00477,"percentile":0.39191}],"risk":0.431685,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-68525","https://lists.apache.org/thread/x1y2lfsgzxwzc456f8954vbvgn03zhd7","http://www.openwall.com/lists/oss-security/2026/08/26/7","https://github.com/apache/tomcat/commit/10d048e16034ddf12055e0cede0da05b15c823b8","https://github.com/apache/tomcat/commit/32f0c38526b4e655ff0c17cd97afedefc624fe43","https://github.com/apache/tomcat/commit/58123aa468a20e2a079b7e0c68a4009e2475c098","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-h3x4-894j-xpx5","description":"Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2026-68525","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-68525","cwe":"CWE-863","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-68525","date":"2026-10-08","epss":0.00477,"percentile":0.39191}],"urls":["https://lists.apache.org/thread/x1y2lfsgzxwzc456f8954vbvgn03zhd7","http://www.openwall.com/lists/oss-security/2026/08/26/7"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-68525","description":"Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET.\n\n\n\n\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through 9.0.120.\n\n\n\n\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nUsers are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fixes the issue."}]},{"artifact":{"id":"c9a07c3b9df49ddb","cpes":["cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0-0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*"],"name":"libglib2.0-0","purl":"pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.6?arch=amd64&distro=ubuntu-20.04&upstream=glib2.0","type":"deb","version":"2.64.6-1~ubuntu20.04.6","language":"","licenses":["sha256:f65e92234e97932114d94d72fc898fcddc854345f77caae80af26ad5cd94cce8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libglib2.0-0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libglib2.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glib2.0"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-58010","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glib2.0","version":"2.64.6-1~ubuntu20.04.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-58010","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-58010","cwe":"CWE-126","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-58010","date":"2026-10-08","epss":0.00853,"percentile":0.56982}],"risk":0.4265,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-58010"},"relatedVulnerabilities":[{"id":"CVE-2026-58010","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58010","cwe":"CWE-126","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-58010","date":"2026-10-08","epss":0.00853,"percentile":0.56982}],"urls":["https://access.redhat.com/errata/RHSA-2026:49512","https://access.redhat.com/errata/RHSA-2026:55440","https://access.redhat.com/errata/RHSA-2026:57015","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:61766","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:63135","https://access.redhat.com/errata/RHSA-2026:63138","https://access.redhat.com/errata/RHSA-2026:63140","https://access.redhat.com/errata/RHSA-2026:65762","https://access.redhat.com/errata/RHSA-2026:65763","https://access.redhat.com/errata/RHSA-2026:65767","https://access.redhat.com/errata/RHSA-2026:65768","https://access.redhat.com/errata/RHSA-2026:65769","https://access.redhat.com/errata/RHSA-2026:65770","https://access.redhat.com/errata/RHSA-2026:65771","https://access.redhat.com/errata/RHSA-2026:65773","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:73859","https://access.redhat.com/errata/RHSA-2026:73909","https://access.redhat.com/errata/RHSA-2026:73929","https://access.redhat.com/errata/RHSA-2026:73930","https://access.redhat.com/errata/RHSA-2026:73959","https://access.redhat.com/errata/RHSA-2026:73960","https://access.redhat.com/errata/RHSA-2026:73961","https://access.redhat.com/errata/RHSA-2026:73962","https://access.redhat.com/errata/RHSA-2026:74458","https://access.redhat.com/errata/RHSA-2026:74459","https://access.redhat.com/errata/RHSA-2026:74460","https://access.redhat.com/errata/RHSA-2026:74461","https://access.redhat.com/errata/RHSA-2026:74462","https://access.redhat.com/errata/RHSA-2026:74463","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:74677","https://access.redhat.com/errata/RHSA-2026:74678","https://access.redhat.com/errata/RHSA-2026:74679","https://access.redhat.com/errata/RHSA-2026:74681","https://access.redhat.com/errata/RHSA-2026:74683","https://access.redhat.com/errata/RHSA-2026:74685","https://access.redhat.com/errata/RHSA-2026:74687","https://access.redhat.com/errata/RHSA-2026:74688","https://access.redhat.com/errata/RHSA-2026:74771","https://access.redhat.com/errata/RHSA-2026:75652","https://access.redhat.com/errata/RHSA-2026:75654","https://access.redhat.com/errata/RHSA-2026:75655","https://access.redhat.com/errata/RHSA-2026:75657","https://access.redhat.com/errata/RHSA-2026:75658","https://access.redhat.com/errata/RHSA-2026:75659","https://access.redhat.com/errata/RHSA-2026:75660","https://access.redhat.com/errata/RHSA-2026:76042","https://access.redhat.com/security/cve/CVE-2026-58010","https://bugzilla.redhat.com/show_bug.cgi?id=2492243","https://gitlab.gnome.org/GNOME/glib/-/issues/3915"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58010","description":"A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary."}]},{"artifact":{"id":"c9a07c3b9df49ddb","cpes":["cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0-0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*"],"name":"libglib2.0-0","purl":"pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.6?arch=amd64&distro=ubuntu-20.04&upstream=glib2.0","type":"deb","version":"2.64.6-1~ubuntu20.04.6","language":"","licenses":["sha256:f65e92234e97932114d94d72fc898fcddc854345f77caae80af26ad5cd94cce8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libglib2.0-0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libglib2.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glib2.0"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-58012","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glib2.0","version":"2.64.6-1~ubuntu20.04.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-58012","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-58012","cwe":"CWE-126","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-58012","date":"2026-10-08","epss":0.00853,"percentile":0.56982}],"risk":0.4265,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-58012"},"relatedVulnerabilities":[{"id":"CVE-2026-58012","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58012","cwe":"CWE-126","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-58012","date":"2026-10-08","epss":0.00853,"percentile":0.56982}],"urls":["https://access.redhat.com/errata/RHSA-2026:49512","https://access.redhat.com/errata/RHSA-2026:55440","https://access.redhat.com/errata/RHSA-2026:57015","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:61766","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:63135","https://access.redhat.com/errata/RHSA-2026:63138","https://access.redhat.com/errata/RHSA-2026:63140","https://access.redhat.com/errata/RHSA-2026:65762","https://access.redhat.com/errata/RHSA-2026:65763","https://access.redhat.com/errata/RHSA-2026:65767","https://access.redhat.com/errata/RHSA-2026:65768","https://access.redhat.com/errata/RHSA-2026:65769","https://access.redhat.com/errata/RHSA-2026:65770","https://access.redhat.com/errata/RHSA-2026:65771","https://access.redhat.com/errata/RHSA-2026:65773","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:73859","https://access.redhat.com/errata/RHSA-2026:73909","https://access.redhat.com/errata/RHSA-2026:73929","https://access.redhat.com/errata/RHSA-2026:73930","https://access.redhat.com/errata/RHSA-2026:73959","https://access.redhat.com/errata/RHSA-2026:73960","https://access.redhat.com/errata/RHSA-2026:73961","https://access.redhat.com/errata/RHSA-2026:73962","https://access.redhat.com/errata/RHSA-2026:74458","https://access.redhat.com/errata/RHSA-2026:74459","https://access.redhat.com/errata/RHSA-2026:74460","https://access.redhat.com/errata/RHSA-2026:74461","https://access.redhat.com/errata/RHSA-2026:74462","https://access.redhat.com/errata/RHSA-2026:74463","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:74677","https://access.redhat.com/errata/RHSA-2026:74678","https://access.redhat.com/errata/RHSA-2026:74679","https://access.redhat.com/errata/RHSA-2026:74681","https://access.redhat.com/errata/RHSA-2026:74683","https://access.redhat.com/errata/RHSA-2026:74685","https://access.redhat.com/errata/RHSA-2026:74687","https://access.redhat.com/errata/RHSA-2026:74688","https://access.redhat.com/errata/RHSA-2026:74771","https://access.redhat.com/errata/RHSA-2026:75652","https://access.redhat.com/errata/RHSA-2026:75654","https://access.redhat.com/errata/RHSA-2026:75655","https://access.redhat.com/errata/RHSA-2026:75657","https://access.redhat.com/errata/RHSA-2026:75658","https://access.redhat.com/errata/RHSA-2026:75659","https://access.redhat.com/errata/RHSA-2026:75660","https://access.redhat.com/errata/RHSA-2026:76042","https://access.redhat.com/security/cve/CVE-2026-58012","https://bugzilla.redhat.com/show_bug.cgi?id=2492247","https://gitlab.gnome.org/GNOME/glib/-/issues/3918"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58012","description":"A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary."}]},{"artifact":{"id":"c9a07c3b9df49ddb","cpes":["cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0-0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*"],"name":"libglib2.0-0","purl":"pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.6?arch=amd64&distro=ubuntu-20.04&upstream=glib2.0","type":"deb","version":"2.64.6-1~ubuntu20.04.6","language":"","licenses":["sha256:f65e92234e97932114d94d72fc898fcddc854345f77caae80af26ad5cd94cce8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libglib2.0-0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libglib2.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glib2.0"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-58013","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glib2.0","version":"2.64.6-1~ubuntu20.04.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-58013","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-58013","cwe":"CWE-126","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-58013","date":"2026-10-08","epss":0.00853,"percentile":0.56982}],"risk":0.4265,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-58013"},"relatedVulnerabilities":[{"id":"CVE-2026-58013","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58013","cwe":"CWE-126","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-58013","date":"2026-10-08","epss":0.00853,"percentile":0.56982}],"urls":["https://access.redhat.com/errata/RHSA-2026:49512","https://access.redhat.com/errata/RHSA-2026:55440","https://access.redhat.com/errata/RHSA-2026:57015","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:61766","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:63135","https://access.redhat.com/errata/RHSA-2026:63138","https://access.redhat.com/errata/RHSA-2026:63140","https://access.redhat.com/errata/RHSA-2026:65762","https://access.redhat.com/errata/RHSA-2026:65763","https://access.redhat.com/errata/RHSA-2026:65767","https://access.redhat.com/errata/RHSA-2026:65768","https://access.redhat.com/errata/RHSA-2026:65769","https://access.redhat.com/errata/RHSA-2026:65770","https://access.redhat.com/errata/RHSA-2026:65771","https://access.redhat.com/errata/RHSA-2026:65773","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:73859","https://access.redhat.com/errata/RHSA-2026:73909","https://access.redhat.com/errata/RHSA-2026:73929","https://access.redhat.com/errata/RHSA-2026:73930","https://access.redhat.com/errata/RHSA-2026:73959","https://access.redhat.com/errata/RHSA-2026:73960","https://access.redhat.com/errata/RHSA-2026:73961","https://access.redhat.com/errata/RHSA-2026:73962","https://access.redhat.com/errata/RHSA-2026:74458","https://access.redhat.com/errata/RHSA-2026:74459","https://access.redhat.com/errata/RHSA-2026:74460","https://access.redhat.com/errata/RHSA-2026:74461","https://access.redhat.com/errata/RHSA-2026:74462","https://access.redhat.com/errata/RHSA-2026:74463","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:74677","https://access.redhat.com/errata/RHSA-2026:74678","https://access.redhat.com/errata/RHSA-2026:74679","https://access.redhat.com/errata/RHSA-2026:74681","https://access.redhat.com/errata/RHSA-2026:74683","https://access.redhat.com/errata/RHSA-2026:74685","https://access.redhat.com/errata/RHSA-2026:74687","https://access.redhat.com/errata/RHSA-2026:74688","https://access.redhat.com/errata/RHSA-2026:74771","https://access.redhat.com/errata/RHSA-2026:75652","https://access.redhat.com/errata/RHSA-2026:75654","https://access.redhat.com/errata/RHSA-2026:75655","https://access.redhat.com/errata/RHSA-2026:75657","https://access.redhat.com/errata/RHSA-2026:75658","https://access.redhat.com/errata/RHSA-2026:75659","https://access.redhat.com/errata/RHSA-2026:75660","https://access.redhat.com/errata/RHSA-2026:76042","https://access.redhat.com/security/cve/CVE-2026-58013","https://bugzilla.redhat.com/show_bug.cgi?id=2492248","https://gitlab.gnome.org/GNOME/glib/-/issues/3925"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58013","description":"A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.110"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-hgrr-935x-pq79","versionConstraint":">=9.0.0.M1,<9.0.110 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-hgrr-935x-pq79","fix":{"state":"fixed","versions":["9.0.110"],"available":[{"date":"2025-10-29","kind":"first-observed","version":"9.0.110"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-61795","cwe":"CWE-404","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-61795","date":"2026-10-08","epss":0.01249,"percentile":0.68475}],"risk":0.42466,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-61795","https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp","https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06","https://github.com/apache/tomcat/commit/af6e9181620304c0d818121c29c074e1330610d0","https://github.com/apache/tomcat/commit/afa422bd7ca1eef0f507259c682fd876494d9c3b","https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.47","https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.12","https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.110","http://www.openwall.com/lists/oss-security/2025/10/27/6","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"Low","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-hgrr-935x-pq79","description":"Apache Tomcat Vulnerable to Improper Resource Shutdown or Release"},"relatedVulnerabilities":[{"id":"CVE-2025-61795","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-61795","cwe":"CWE-404","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2025-61795","date":"2026-10-08","epss":0.01249,"percentile":0.68475}],"urls":["https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp","http://www.openwall.com/lists/oss-security/2025/10/27/6","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-61795","description":"Improper Resource Shutdown or Release vulnerability in Apache Tomcat.\n\nIf an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage collection process to delete. Depending on JVM settings, application memory usage and application load, it was possible that space for the temporary copies of uploaded parts would be filled faster than GC cleared it, leading to a DoS.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.11, from 10.1.0-M1 through 10.1.46, from 9.0.0.M1 through 9.0.109.\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.\nUsers are recommended to upgrade to version 11.0.12 or later, 10.1.47 or later or 9.0.110 or later which fixes the issue."}]},{"artifact":{"id":"1dd7e733de1113cd","cpes":["cpe:2.3:a:libdbus-1-3:libdbus-1-3:1.12.16-2ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libdbus-1-3:libdbus_1_3:1.12.16-2ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libdbus_1_3:libdbus-1-3:1.12.16-2ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libdbus_1_3:libdbus_1_3:1.12.16-2ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libdbus-1:libdbus-1-3:1.12.16-2ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libdbus-1:libdbus_1_3:1.12.16-2ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libdbus_1:libdbus-1-3:1.12.16-2ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libdbus_1:libdbus_1_3:1.12.16-2ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libdbus:libdbus-1-3:1.12.16-2ubuntu2.3:*:*:*:*:*:*:*","cpe:2.3:a:libdbus:libdbus_1_3:1.12.16-2ubuntu2.3:*:*:*:*:*:*:*"],"name":"libdbus-1-3","purl":"pkg:deb/ubuntu/libdbus-1-3@1.12.16-2ubuntu2.3?arch=amd64&distro=ubuntu-20.04&upstream=dbus","type":"deb","version":"1.12.16-2ubuntu2.3","language":"","licenses":["AFL-2.1","BSD-3-clause","BSD-3-clause-generic","Expat","GPL-2","GPL-2+","Tcl-BSDish","g10-permissive"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libdbus-1-3/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libdbus-1-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libdbus-1-3:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libdbus-1-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"dbus"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-34969","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"dbus","version":"1.12.16-2ubuntu2.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-34969","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-34969","cwe":"CWE-404","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-34969","date":"2026-10-08","epss":0.01405,"percentile":0.71764}],"risk":0.4215,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-34969"},"relatedVulnerabilities":[{"id":"CVE-2023-34969","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34969","cwe":"CWE-404","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-34969","date":"2026-10-08","epss":0.01405,"percentile":0.71764}],"urls":["https://gitlab.freedesktop.org/dbus/dbus/-/issues/457","https://lists.debian.org/debian-lts-announce/2023/10/msg00033.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZYCDRMD7B4XO4HF6C6YTLH4YUD7TANP/","https://security.netapp.com/advisory/ntap-20231208-0007/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34969","description":"D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6."}]},{"artifact":{"id":"3640cf00fde88f22","cpes":["cpe:2.3:a:binutils:binutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-13716","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2017-13716","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-13716","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-13716","date":"2026-10-08","epss":0.01399,"percentile":0.71642}],"risk":0.4197,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2017-13716"},"relatedVulnerabilities":[{"id":"CVE-2017-13716","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-13716","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-13716","date":"2026-10-08","epss":0.01399,"percentile":0.71642}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=22009"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-13716","description":"The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd)."}]},{"artifact":{"id":"197555b9cdbc0e71","cpes":["cpe:2.3:a:binutils-common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-common","purl":"pkg:deb/ubuntu/binutils-common@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-13716","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2017-13716","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-13716","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-13716","date":"2026-10-08","epss":0.01399,"percentile":0.71642}],"risk":0.4197,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2017-13716"},"relatedVulnerabilities":[{"id":"CVE-2017-13716","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-13716","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-13716","date":"2026-10-08","epss":0.01399,"percentile":0.71642}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=22009"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-13716","description":"The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd)."}]},{"artifact":{"id":"436f5c90439c5365","cpes":["cpe:2.3:a:binutils-x86-64-linux-gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux-gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/binutils-x86-64-linux-gnu@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list"}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-13716","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2017-13716","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-13716","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-13716","date":"2026-10-08","epss":0.01399,"percentile":0.71642}],"risk":0.4197,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2017-13716"},"relatedVulnerabilities":[{"id":"CVE-2017-13716","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-13716","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-13716","date":"2026-10-08","epss":0.01399,"percentile":0.71642}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=22009"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-13716","description":"The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd)."}]},{"artifact":{"id":"e8585c2fc66c583c","cpes":["cpe:2.3:a:libbinutils:libbinutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libbinutils","purl":"pkg:deb/ubuntu/libbinutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libbinutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-13716","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2017-13716","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-13716","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-13716","date":"2026-10-08","epss":0.01399,"percentile":0.71642}],"risk":0.4197,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2017-13716"},"relatedVulnerabilities":[{"id":"CVE-2017-13716","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-13716","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-13716","date":"2026-10-08","epss":0.01399,"percentile":0.71642}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=22009"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-13716","description":"The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd)."}]},{"artifact":{"id":"e9c23578b20f9960","cpes":["cpe:2.3:a:libctf-nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf-nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf-nobfd0","purl":"pkg:deb/ubuntu/libctf-nobfd0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libctf-nobfd0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf-nobfd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-13716","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2017-13716","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-13716","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-13716","date":"2026-10-08","epss":0.01399,"percentile":0.71642}],"risk":0.4197,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2017-13716"},"relatedVulnerabilities":[{"id":"CVE-2017-13716","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-13716","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-13716","date":"2026-10-08","epss":0.01399,"percentile":0.71642}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=22009"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-13716","description":"The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd)."}]},{"artifact":{"id":"5a72139b32f71a25","cpes":["cpe:2.3:a:libctf0:libctf0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf0","purl":"pkg:deb/ubuntu/libctf0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-13716","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2017-13716","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-13716","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-13716","date":"2026-10-08","epss":0.01399,"percentile":0.71642}],"risk":0.4197,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2017-13716"},"relatedVulnerabilities":[{"id":"CVE-2017-13716","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-13716","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-13716","date":"2026-10-08","epss":0.01399,"percentile":0.71642}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=22009"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-13716","description":"The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd)."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-32990","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-32990","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-32990","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32990","date":"2026-10-08","epss":0.00834,"percentile":0.56371}],"risk":0.41700000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-32990"},"relatedVulnerabilities":[{"id":"CVE-2025-32990","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-32990","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-32990","date":"2026-10-08","epss":0.00834,"percentile":0.56371}],"urls":["https://access.redhat.com/errata/RHSA-2025:16115","https://access.redhat.com/errata/RHSA-2025:16116","https://access.redhat.com/errata/RHSA-2025:17181","https://access.redhat.com/errata/RHSA-2025:17348","https://access.redhat.com/errata/RHSA-2025:17361","https://access.redhat.com/errata/RHSA-2025:17415","https://access.redhat.com/errata/RHSA-2025:19088","https://access.redhat.com/errata/RHSA-2025:22529","https://access.redhat.com/errata/RHSA-2026:7477","https://access.redhat.com/security/cve/CVE-2025-32990","https://bugzilla.redhat.com/show_bug.cgi?id=2359620","https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html","http://www.openwall.com/lists/oss-security/2025/07/11/3","https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-32990","description":"A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system."}]},{"artifact":{"id":"c9a07c3b9df49ddb","cpes":["cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0-0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*"],"name":"libglib2.0-0","purl":"pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.6?arch=amd64&distro=ubuntu-20.04&upstream=glib2.0","type":"deb","version":"2.64.6-1~ubuntu20.04.6","language":"","licenses":["sha256:f65e92234e97932114d94d72fc898fcddc854345f77caae80af26ad5cd94cce8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libglib2.0-0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libglib2.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glib2.0"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-14087","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glib2.0","version":"2.64.6-1~ubuntu20.04.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-14087","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-14087","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-14087","date":"2026-10-08","epss":0.00826,"percentile":0.56148}],"risk":0.413,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-14087"},"relatedVulnerabilities":[{"id":"CVE-2025-14087","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-14087","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-14087","date":"2026-10-08","epss":0.00826,"percentile":0.56148}],"urls":["https://access.redhat.com/errata/RHSA-2026:15953","https://access.redhat.com/errata/RHSA-2026:15969","https://access.redhat.com/errata/RHSA-2026:15971","https://access.redhat.com/errata/RHSA-2026:19148","https://access.redhat.com/errata/RHSA-2026:19361","https://access.redhat.com/errata/RHSA-2026:19452","https://access.redhat.com/errata/RHSA-2026:19457","https://access.redhat.com/errata/RHSA-2026:19459","https://access.redhat.com/errata/RHSA-2026:19460","https://access.redhat.com/errata/RHSA-2026:19523","https://access.redhat.com/errata/RHSA-2026:19524","https://access.redhat.com/errata/RHSA-2026:19565","https://access.redhat.com/errata/RHSA-2026:19566","https://access.redhat.com/errata/RHSA-2026:19567","https://access.redhat.com/errata/RHSA-2026:21275","https://access.redhat.com/errata/RHSA-2026:22634","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:49512","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:7461","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2025-14087","https://bugzilla.redhat.com/show_bug.cgi?id=2419093","https://gitlab.gnome.org/GNOME/glib/-/issues/3834"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-14087","description":"A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings."}]},{"artifact":{"id":"a3c8be6e73e8dbb2","cpes":["cpe:2.3:a:jq:jq:1.6-1ubuntu0.20.04.1:*:*:*:*:*:*:*"],"name":"jq","purl":"pkg:deb/ubuntu/jq@1.6-1ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.6-1ubuntu0.20.04.1","language":"","licenses":["CC-BY-3.0","Expat","GPL-2","GPL-2.0+","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/jq/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/jq/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/jq.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/jq.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/jq.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/jq.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-39979","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"jq","version":"1.6-1ubuntu0.20.04.1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-39979","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-39979","cwe":"CWE-125","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-39979","cwe":"CWE-125","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39979","date":"2026-10-08","epss":0.00824,"percentile":0.56057}],"risk":0.41200000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-39979"},"relatedVulnerabilities":[{"id":"CVE-2026-39979","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39979","cwe":"CWE-125","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-39979","cwe":"CWE-125","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39979","date":"2026-10-08","epss":0.00824,"percentile":0.56057}],"urls":["https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f","https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p","https://access.redhat.com/errata/RHSA-2026:16252","https://access.redhat.com/errata/RHSA-2026:16692","https://access.redhat.com/errata/RHSA-2026:16693","https://access.redhat.com/errata/RHSA-2026:18040","https://access.redhat.com/errata/RHSA-2026:18042","https://access.redhat.com/errata/RHSA-2026:18043","https://access.redhat.com/errata/RHSA-2026:18044","https://access.redhat.com/errata/RHSA-2026:18045","https://access.redhat.com/errata/RHSA-2026:18046","https://access.redhat.com/errata/RHSA-2026:18047","https://access.redhat.com/errata/RHSA-2026:18048","https://access.redhat.com/errata/RHSA-2026:19151","https://access.redhat.com/errata/RHSA-2026:19365","https://access.redhat.com/errata/RHSA-2026:23233","https://access.redhat.com/errata/RHSA-2026:23245","https://access.redhat.com/errata/RHSA-2026:25044","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:25181","https://access.redhat.com/errata/RHSA-2026:26528","https://access.redhat.com/errata/RHSA-2026:26542","https://access.redhat.com/errata/RHSA-2026:28887","https://access.redhat.com/errata/RHSA-2026:30078","https://access.redhat.com/errata/RHSA-2026:30087","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:30089","https://access.redhat.com/errata/RHSA-2026:34098","https://access.redhat.com/errata/RHSA-2026:8579","https://access.redhat.com/security/cve/CVE-2026-39979","https://bugzilla.redhat.com/show_bug.cgi?id=2458077","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39979.json"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-39979","description":"jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jv_parse_sized() API in libjq accepts a counted buffer with an explicit length parameter, but its error-handling path formats the input buffer using %s in jv_string_fmt(), which reads until a NUL terminator is found rather than respecting the caller-supplied length. This means that when malformed JSON is passed in a non-NUL-terminated buffer, the error construction logic performs an out-of-bounds read past the end of the buffer. The vulnerability is reachable by any libjq consumer calling jv_parse_sized() with untrusted input, and depending on memory layout, can result in memory disclosure or process termination. The issue has been patched in commit 2f09060afab23fe9390cce7cb860b10416e1bf5f."}]},{"artifact":{"id":"1b5952588f5c6c07","cpes":["cpe:2.3:a:libjq1:libjq1:1.6-1ubuntu0.20.04.1:*:*:*:*:*:*:*"],"name":"libjq1","purl":"pkg:deb/ubuntu/libjq1@1.6-1ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04&upstream=jq","type":"deb","version":"1.6-1ubuntu0.20.04.1","language":"","licenses":["CC-BY-3.0","Expat","GPL-2","GPL-2.0+","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libjq1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libjq1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libjq1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libjq1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"jq"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-39979","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"jq","version":"1.6-1ubuntu0.20.04.1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-39979","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-39979","cwe":"CWE-125","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-39979","cwe":"CWE-125","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39979","date":"2026-10-08","epss":0.00824,"percentile":0.56057}],"risk":0.41200000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-39979"},"relatedVulnerabilities":[{"id":"CVE-2026-39979","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-39979","cwe":"CWE-125","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-39979","cwe":"CWE-125","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-39979","date":"2026-10-08","epss":0.00824,"percentile":0.56057}],"urls":["https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f","https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p","https://access.redhat.com/errata/RHSA-2026:16252","https://access.redhat.com/errata/RHSA-2026:16692","https://access.redhat.com/errata/RHSA-2026:16693","https://access.redhat.com/errata/RHSA-2026:18040","https://access.redhat.com/errata/RHSA-2026:18042","https://access.redhat.com/errata/RHSA-2026:18043","https://access.redhat.com/errata/RHSA-2026:18044","https://access.redhat.com/errata/RHSA-2026:18045","https://access.redhat.com/errata/RHSA-2026:18046","https://access.redhat.com/errata/RHSA-2026:18047","https://access.redhat.com/errata/RHSA-2026:18048","https://access.redhat.com/errata/RHSA-2026:19151","https://access.redhat.com/errata/RHSA-2026:19365","https://access.redhat.com/errata/RHSA-2026:23233","https://access.redhat.com/errata/RHSA-2026:23245","https://access.redhat.com/errata/RHSA-2026:25044","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:25181","https://access.redhat.com/errata/RHSA-2026:26528","https://access.redhat.com/errata/RHSA-2026:26542","https://access.redhat.com/errata/RHSA-2026:28887","https://access.redhat.com/errata/RHSA-2026:30078","https://access.redhat.com/errata/RHSA-2026:30087","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:30089","https://access.redhat.com/errata/RHSA-2026:34098","https://access.redhat.com/errata/RHSA-2026:8579","https://access.redhat.com/security/cve/CVE-2026-39979","https://bugzilla.redhat.com/show_bug.cgi?id=2458077","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39979.json"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-39979","description":"jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jv_parse_sized() API in libjq accepts a counted buffer with an explicit length parameter, but its error-handling path formats the input buffer using %s in jv_string_fmt(), which reads until a NUL terminator is found rather than respecting the caller-supplied length. This means that when malformed JSON is passed in a non-NUL-terminated buffer, the error construction logic performs an out-of-bounds read past the end of the buffer. The vulnerability is reachable by any libjq consumer calling jv_parse_sized() with untrusted input, and depending on memory layout, can result in memory disclosure or process termination. The issue has been patched in commit 2f09060afab23fe9390cce7cb860b10416e1bf5f."}]},{"artifact":{"id":"42da88b6b6a23ef6","cpes":["cpe:2.3:a:libnss3:libnss3:2\\:3.49.1-1ubuntu1.9:*:*:*:*:*:*:*"],"name":"libnss3","purl":"pkg:deb/ubuntu/libnss3@2%3A3.49.1-1ubuntu1.9?arch=amd64&distro=ubuntu-20.04&upstream=nss","type":"deb","version":"2:3.49.1-1ubuntu1.9","language":"","licenses":["BSD-3","MIT","MPL-2.0","Zlib","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libnss3/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libnss3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libnss3:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libnss3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"nss"}]},"matchDetails":[{"fix":{"suggestedVersion":"2:3.98-0ubuntu0.20.04.1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5388","versionConstraint":"< 2:3.98-0ubuntu0.20.04.1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"nss","version":"2:3.49.1-1ubuntu1.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-5388","fix":{"state":"fixed","versions":["2:3.98-0ubuntu0.20.04.1"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2:3.98-0ubuntu0.20.04.1"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-5388","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5388","date":"2026-10-08","epss":0.00822,"percentile":0.56011}],"risk":0.411,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-5388"},"relatedVulnerabilities":[{"id":"CVE-2023-5388","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5388","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5388","date":"2026-10-08","epss":0.00822,"percentile":0.56011}],"urls":["https://bugzilla.mozilla.org/show_bug.cgi?id=1780432","https://lists.debian.org/debian-lts-announce/2024/03/msg00022.html","https://lists.debian.org/debian-lts-announce/2024/03/msg00028.html","https://www.mozilla.org/security/advisories/mfsa2024-12/","https://www.mozilla.org/security/advisories/mfsa2024-13/","https://www.mozilla.org/security/advisories/mfsa2024-14/","https://lists.debian.org/debian-lts-announce/2024/03/msg00010.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5388","description":"NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover the private data. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.15+6~us1-0ubuntu1~20.04"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-21587","versionConstraint":"< 17.0.15+6~us1-0ubuntu1~20.04 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-21587","fix":{"state":"fixed","versions":["17.0.15+6~us1-0ubuntu1~20.04"],"available":[{"date":"2025-05-06","kind":"advisory","version":"17.0.15+6~us1-0ubuntu1~20.04"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-21587","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-21587","date":"2026-10-08","epss":0.00818,"percentile":0.55865}],"risk":0.409,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-21587"},"relatedVulnerabilities":[{"id":"CVE-2025-21587","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-21587","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-21587","date":"2026-10-08","epss":0.00818,"percentile":0.55865}],"urls":["https://www.oracle.com/security-alerts/cpuapr2025.html","https://lists.debian.org/debian-lts-announce/2025/05/msg00026.html","https://security.netapp.com/advisory/ntap-20250502-0005/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-21587","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle GraalVM Enterprise Edition:20.3.17 and  21.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"c9a07c3b9df49ddb","cpes":["cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0-0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*"],"name":"libglib2.0-0","purl":"pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.6?arch=amd64&distro=ubuntu-20.04&upstream=glib2.0","type":"deb","version":"2.64.6-1~ubuntu20.04.6","language":"","licenses":["sha256:f65e92234e97932114d94d72fc898fcddc854345f77caae80af26ad5cd94cce8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libglib2.0-0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libglib2.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glib2.0"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-58011","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glib2.0","version":"2.64.6-1~ubuntu20.04.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-58011","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-58011","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-58011","date":"2026-10-08","epss":0.00816,"percentile":0.55788}],"risk":0.40800000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-58011"},"relatedVulnerabilities":[{"id":"CVE-2026-58011","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58011","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-58011","date":"2026-10-08","epss":0.00816,"percentile":0.55788}],"urls":["https://access.redhat.com/errata/RHSA-2026:49512","https://access.redhat.com/errata/RHSA-2026:55440","https://access.redhat.com/errata/RHSA-2026:57015","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:61766","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:63135","https://access.redhat.com/errata/RHSA-2026:63138","https://access.redhat.com/errata/RHSA-2026:63140","https://access.redhat.com/errata/RHSA-2026:65762","https://access.redhat.com/errata/RHSA-2026:65763","https://access.redhat.com/errata/RHSA-2026:65767","https://access.redhat.com/errata/RHSA-2026:65768","https://access.redhat.com/errata/RHSA-2026:65769","https://access.redhat.com/errata/RHSA-2026:65770","https://access.redhat.com/errata/RHSA-2026:65771","https://access.redhat.com/errata/RHSA-2026:65773","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:73859","https://access.redhat.com/errata/RHSA-2026:73909","https://access.redhat.com/errata/RHSA-2026:73929","https://access.redhat.com/errata/RHSA-2026:73930","https://access.redhat.com/errata/RHSA-2026:73959","https://access.redhat.com/errata/RHSA-2026:73960","https://access.redhat.com/errata/RHSA-2026:73961","https://access.redhat.com/errata/RHSA-2026:73962","https://access.redhat.com/errata/RHSA-2026:74458","https://access.redhat.com/errata/RHSA-2026:74459","https://access.redhat.com/errata/RHSA-2026:74460","https://access.redhat.com/errata/RHSA-2026:74461","https://access.redhat.com/errata/RHSA-2026:74462","https://access.redhat.com/errata/RHSA-2026:74463","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:74677","https://access.redhat.com/errata/RHSA-2026:74678","https://access.redhat.com/errata/RHSA-2026:74679","https://access.redhat.com/errata/RHSA-2026:74681","https://access.redhat.com/errata/RHSA-2026:74683","https://access.redhat.com/errata/RHSA-2026:74685","https://access.redhat.com/errata/RHSA-2026:74687","https://access.redhat.com/errata/RHSA-2026:74688","https://access.redhat.com/errata/RHSA-2026:74771","https://access.redhat.com/errata/RHSA-2026:75652","https://access.redhat.com/errata/RHSA-2026:75654","https://access.redhat.com/errata/RHSA-2026:75655","https://access.redhat.com/errata/RHSA-2026:75657","https://access.redhat.com/errata/RHSA-2026:75658","https://access.redhat.com/errata/RHSA-2026:75659","https://access.redhat.com/errata/RHSA-2026:75660","https://access.redhat.com/errata/RHSA-2026:76042","https://access.redhat.com/security/cve/CVE-2026-58011","https://bugzilla.redhat.com/show_bug.cgi?id=2492245","https://gitlab.gnome.org/GNOME/glib/-/issues/3917","https://gitlab.gnome.org/GNOME/glib/-/work_items/3917"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58011","description":"A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service."}]},{"artifact":{"id":"3640cf00fde88f22","cpes":["cpe:2.3:a:binutils:binutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-1153","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1153","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1153","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1153","date":"2026-10-08","epss":0.01357,"percentile":0.70835}],"risk":0.4071,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1153"},"relatedVulnerabilities":[{"id":"CVE-2025-1153","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1153","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1153","date":"2026-10-08","epss":0.01357,"percentile":0.70835}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=32603","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150","https://vuldb.com/?ctiid.295057","https://vuldb.com/?id.295057","https://vuldb.com/?submit.489991","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250404-0005/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1153","description":"A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 2.45 is able to address this issue. The identifier of the patch is 8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"197555b9cdbc0e71","cpes":["cpe:2.3:a:binutils-common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-common","purl":"pkg:deb/ubuntu/binutils-common@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1153","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1153","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1153","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1153","date":"2026-10-08","epss":0.01357,"percentile":0.70835}],"risk":0.4071,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1153"},"relatedVulnerabilities":[{"id":"CVE-2025-1153","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1153","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1153","date":"2026-10-08","epss":0.01357,"percentile":0.70835}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=32603","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150","https://vuldb.com/?ctiid.295057","https://vuldb.com/?id.295057","https://vuldb.com/?submit.489991","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250404-0005/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1153","description":"A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 2.45 is able to address this issue. The identifier of the patch is 8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"436f5c90439c5365","cpes":["cpe:2.3:a:binutils-x86-64-linux-gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux-gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/binutils-x86-64-linux-gnu@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list"}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1153","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1153","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1153","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1153","date":"2026-10-08","epss":0.01357,"percentile":0.70835}],"risk":0.4071,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1153"},"relatedVulnerabilities":[{"id":"CVE-2025-1153","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1153","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1153","date":"2026-10-08","epss":0.01357,"percentile":0.70835}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=32603","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150","https://vuldb.com/?ctiid.295057","https://vuldb.com/?id.295057","https://vuldb.com/?submit.489991","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250404-0005/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1153","description":"A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 2.45 is able to address this issue. The identifier of the patch is 8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"e8585c2fc66c583c","cpes":["cpe:2.3:a:libbinutils:libbinutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libbinutils","purl":"pkg:deb/ubuntu/libbinutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libbinutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1153","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1153","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1153","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1153","date":"2026-10-08","epss":0.01357,"percentile":0.70835}],"risk":0.4071,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1153"},"relatedVulnerabilities":[{"id":"CVE-2025-1153","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1153","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1153","date":"2026-10-08","epss":0.01357,"percentile":0.70835}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=32603","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150","https://vuldb.com/?ctiid.295057","https://vuldb.com/?id.295057","https://vuldb.com/?submit.489991","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250404-0005/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1153","description":"A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 2.45 is able to address this issue. The identifier of the patch is 8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"e9c23578b20f9960","cpes":["cpe:2.3:a:libctf-nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf-nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf-nobfd0","purl":"pkg:deb/ubuntu/libctf-nobfd0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libctf-nobfd0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf-nobfd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1153","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1153","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1153","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1153","date":"2026-10-08","epss":0.01357,"percentile":0.70835}],"risk":0.4071,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1153"},"relatedVulnerabilities":[{"id":"CVE-2025-1153","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1153","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1153","date":"2026-10-08","epss":0.01357,"percentile":0.70835}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=32603","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150","https://vuldb.com/?ctiid.295057","https://vuldb.com/?id.295057","https://vuldb.com/?submit.489991","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250404-0005/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1153","description":"A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 2.45 is able to address this issue. The identifier of the patch is 8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"5a72139b32f71a25","cpes":["cpe:2.3:a:libctf0:libctf0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf0","purl":"pkg:deb/ubuntu/libctf0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1153","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1153","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1153","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1153","date":"2026-10-08","epss":0.01357,"percentile":0.70835}],"risk":0.4071,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1153"},"relatedVulnerabilities":[{"id":"CVE-2025-1153","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1153","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1153","date":"2026-10-08","epss":0.01357,"percentile":0.70835}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=32603","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150","https://vuldb.com/?ctiid.295057","https://vuldb.com/?id.295057","https://vuldb.com/?submit.489991","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250404-0005/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1153","description":"A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 2.45 is able to address this issue. The identifier of the patch is 8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"97badb9875b0c74a","cpes":["cpe:2.3:a:perl-base:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.4?arch=amd64&distro=ubuntu-20.04&upstream=perl","type":"deb","version":"5.30.0-9ubuntu0.4","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"fix":{"suggestedVersion":"5.30.0-9ubuntu0.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-47038","versionConstraint":"< 5.30.0-9ubuntu0.5 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"perl","version":"5.30.0-9ubuntu0.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-47038","fix":{"state":"fixed","versions":["5.30.0-9ubuntu0.5"],"available":[{"date":"2023-11-27","kind":"advisory","version":"5.30.0-9ubuntu0.5"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-47038","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-47038","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-47038","date":"2026-10-08","epss":0.00814,"percentile":0.55724}],"risk":0.407,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-47038"},"relatedVulnerabilities":[{"id":"CVE-2023-47038","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-47038","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-47038","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-47038","date":"2026-10-08","epss":0.00814,"percentile":0.55724}],"urls":["https://access.redhat.com/errata/RHSA-2024:2228","https://access.redhat.com/errata/RHSA-2024:3128","https://access.redhat.com/security/cve/CVE-2023-47038","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056746","https://bugzilla.redhat.com/show_bug.cgi?id=2249523","https://github.com/Perl/perl5/commit/12c313ce49b36160a7ca2e9b07ad5bd92ee4a010","https://github.com/Perl/perl5/commit/7047915eef37fccd93e7cd985c29fe6be54650b6","https://github.com/Perl/perl5/commit/ff1f9f59360afeebd6f75ca1502f5c3ebf077da3","https://github.com/aquasecurity/trivy/discussions/8400","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNEEWAACXQCEEAKSG7XX2D5YDRWLCIZJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UMDZZ4SCEW6FRWZDMXGAKZ35THTAWFG6/","https://perldoc.perl.org/perl5382delta#CVE-2023-47038-Write-past-buffer-end-via-illegal-user-defined-Unicode-property","https://ubuntu.com/security/CVE-2023-47100","https://www.suse.com/security/cve/CVE-2023-47100.html","https://github.com/Perl/perl5/commit/92a9eb3d0d52ec7655c1beb29999a5a5219be664"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-47038","description":"A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer."}]},{"artifact":{"id":"97badb9875b0c74a","cpes":["cpe:2.3:a:perl-base:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.4?arch=amd64&distro=ubuntu-20.04&upstream=perl","type":"deb","version":"5.30.0-9ubuntu0.4","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4176","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"perl","version":"5.30.0-9ubuntu0.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-4176","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-4176","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-4176","date":"2026-10-08","epss":0.00811,"percentile":0.55649}],"risk":0.40549999999999997,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-4176"},"relatedVulnerabilities":[{"id":"CVE-2026-4176","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4176","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-4176","date":"2026-10-08","epss":0.00811,"percentile":0.55649}],"urls":["https://github.com/Perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","https://lists.security.metacpan.org/cve-announce/msg/37638919/","https://metacpan.org/release/PMQS/Compress-Raw-Zlib-2.221/source/Changes","https://metacpan.org/release/SHAY/perl-5.40.4/changes","https://metacpan.org/release/SHAY/perl-5.42.2/changes","https://www.cve.org/CVERecord?id=CVE-2026-3381","http://www.openwall.com/lists/oss-security/2026/03/30/2"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4176","description":"Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib.\n\nCompress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable to CVE-2026-3381 due to a vendored version of zlib which has several vulnerabilities, including CVE-2026-27171. The bundled Compress::Raw::Zlib was updated to version 2.221 in Perl blead commit c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94."}]},{"artifact":{"id":"02a2cda4e2596879","cpes":["cpe:2.3:a:curl:curl:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.68.0-1ubuntu2.25"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-11053","versionConstraint":"< 7.68.0-1ubuntu2.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-11053","fix":{"state":"fixed","versions":["7.68.0-1ubuntu2.25"],"available":[{"date":"2024-12-16","kind":"advisory","version":"7.68.0-1ubuntu2.25"}]},"cvss":[],"epss":[{"cve":"CVE-2024-11053","date":"2026-10-08","epss":0.01348,"percentile":0.7063}],"risk":0.4044,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-11053"},"relatedVulnerabilities":[{"id":"CVE-2024-11053","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","metrics":{"baseScore":3.4,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-11053","date":"2026-10-08","epss":0.01348,"percentile":0.7063}],"urls":["https://curl.se/docs/CVE-2024-11053.html","https://curl.se/docs/CVE-2024-11053.json","https://hackerone.com/reports/2829063","http://www.openwall.com/lists/oss-security/2024/12/11/1","https://security.netapp.com/advisory/ntap-20250124-0012/","https://security.netapp.com/advisory/ntap-20250131-0003/","https://security.netapp.com/advisory/ntap-20250131-0004/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-11053","description":"When asked to both use a `.netrc` file for credentials and to follow HTTP\nredirects, curl could leak the password used for the first host to the\nfollowed-to host under certain circumstances.\n\nThis flaw only manifests itself if the netrc file has an entry that matches\nthe redirect target hostname but the entry either omits just the password or\nomits both login and password."}]},{"artifact":{"id":"5bfe812075df9ecc","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04&upstream=curl","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.68.0-1ubuntu2.25"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-11053","versionConstraint":"< 7.68.0-1ubuntu2.25 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-11053","fix":{"state":"fixed","versions":["7.68.0-1ubuntu2.25"],"available":[{"date":"2024-12-16","kind":"advisory","version":"7.68.0-1ubuntu2.25"}]},"cvss":[],"epss":[{"cve":"CVE-2024-11053","date":"2026-10-08","epss":0.01348,"percentile":0.7063}],"risk":0.4044,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-11053"},"relatedVulnerabilities":[{"id":"CVE-2024-11053","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N","metrics":{"baseScore":3.4,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-11053","date":"2026-10-08","epss":0.01348,"percentile":0.7063}],"urls":["https://curl.se/docs/CVE-2024-11053.html","https://curl.se/docs/CVE-2024-11053.json","https://hackerone.com/reports/2829063","http://www.openwall.com/lists/oss-security/2024/12/11/1","https://security.netapp.com/advisory/ntap-20250124-0012/","https://security.netapp.com/advisory/ntap-20250131-0003/","https://security.netapp.com/advisory/ntap-20250131-0004/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-11053","description":"When asked to both use a `.netrc` file for credentials and to follow HTTP\nredirects, curl could leak the password used for the first host to the\nfollowed-to host under certain circumstances.\n\nThis flaw only manifests itself if the netrc file has an entry that matches\nthe redirect target hostname but the entry either omits just the password or\nomits both login and password."}]},{"artifact":{"id":"3640cf00fde88f22","cpes":["cpe:2.3:a:binutils:binutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-1178","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1178","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1178","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1178","date":"2026-10-08","epss":0.00803,"percentile":0.55377}],"risk":0.4015,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1178"},"relatedVulnerabilities":[{"id":"CVE-2025-1178","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1178","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1178","date":"2026-10-08","epss":0.00803,"percentile":0.55377}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15914","https://sourceware.org/bugzilla/show_bug.cgi?id=32638","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75086e9de1707281172cc77f178e7949a4414ed0","https://vuldb.com/?ctiid.295081","https://vuldb.com/?id.295081","https://vuldb.com/?submit.495369","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250411-0008/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1178","description":"A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 75086e9de1707281172cc77f178e7949a4414ed0. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"197555b9cdbc0e71","cpes":["cpe:2.3:a:binutils-common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-common","purl":"pkg:deb/ubuntu/binutils-common@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1178","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1178","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1178","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1178","date":"2026-10-08","epss":0.00803,"percentile":0.55377}],"risk":0.4015,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1178"},"relatedVulnerabilities":[{"id":"CVE-2025-1178","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1178","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1178","date":"2026-10-08","epss":0.00803,"percentile":0.55377}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15914","https://sourceware.org/bugzilla/show_bug.cgi?id=32638","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75086e9de1707281172cc77f178e7949a4414ed0","https://vuldb.com/?ctiid.295081","https://vuldb.com/?id.295081","https://vuldb.com/?submit.495369","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250411-0008/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1178","description":"A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 75086e9de1707281172cc77f178e7949a4414ed0. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"436f5c90439c5365","cpes":["cpe:2.3:a:binutils-x86-64-linux-gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux-gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/binutils-x86-64-linux-gnu@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list"}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1178","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1178","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1178","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1178","date":"2026-10-08","epss":0.00803,"percentile":0.55377}],"risk":0.4015,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1178"},"relatedVulnerabilities":[{"id":"CVE-2025-1178","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1178","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1178","date":"2026-10-08","epss":0.00803,"percentile":0.55377}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15914","https://sourceware.org/bugzilla/show_bug.cgi?id=32638","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75086e9de1707281172cc77f178e7949a4414ed0","https://vuldb.com/?ctiid.295081","https://vuldb.com/?id.295081","https://vuldb.com/?submit.495369","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250411-0008/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1178","description":"A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 75086e9de1707281172cc77f178e7949a4414ed0. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"e8585c2fc66c583c","cpes":["cpe:2.3:a:libbinutils:libbinutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libbinutils","purl":"pkg:deb/ubuntu/libbinutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libbinutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1178","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1178","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1178","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1178","date":"2026-10-08","epss":0.00803,"percentile":0.55377}],"risk":0.4015,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1178"},"relatedVulnerabilities":[{"id":"CVE-2025-1178","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1178","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1178","date":"2026-10-08","epss":0.00803,"percentile":0.55377}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15914","https://sourceware.org/bugzilla/show_bug.cgi?id=32638","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75086e9de1707281172cc77f178e7949a4414ed0","https://vuldb.com/?ctiid.295081","https://vuldb.com/?id.295081","https://vuldb.com/?submit.495369","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250411-0008/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1178","description":"A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 75086e9de1707281172cc77f178e7949a4414ed0. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"e9c23578b20f9960","cpes":["cpe:2.3:a:libctf-nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf-nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf-nobfd0","purl":"pkg:deb/ubuntu/libctf-nobfd0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libctf-nobfd0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf-nobfd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1178","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1178","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1178","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1178","date":"2026-10-08","epss":0.00803,"percentile":0.55377}],"risk":0.4015,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1178"},"relatedVulnerabilities":[{"id":"CVE-2025-1178","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1178","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1178","date":"2026-10-08","epss":0.00803,"percentile":0.55377}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15914","https://sourceware.org/bugzilla/show_bug.cgi?id=32638","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75086e9de1707281172cc77f178e7949a4414ed0","https://vuldb.com/?ctiid.295081","https://vuldb.com/?id.295081","https://vuldb.com/?submit.495369","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250411-0008/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1178","description":"A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 75086e9de1707281172cc77f178e7949a4414ed0. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"5a72139b32f71a25","cpes":["cpe:2.3:a:libctf0:libctf0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf0","purl":"pkg:deb/ubuntu/libctf0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1178","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1178","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1178","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1178","date":"2026-10-08","epss":0.00803,"percentile":0.55377}],"risk":0.4015,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1178"},"relatedVulnerabilities":[{"id":"CVE-2025-1178","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1178","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1178","date":"2026-10-08","epss":0.00803,"percentile":0.55377}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15914","https://sourceware.org/bugzilla/show_bug.cgi?id=32638","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75086e9de1707281172cc77f178e7949a4414ed0","https://vuldb.com/?ctiid.295081","https://vuldb.com/?id.295081","https://vuldb.com/?submit.495369","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250411-0008/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1178","description":"A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 75086e9de1707281172cc77f178e7949a4414ed0. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.10+7-1~20.04.1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-20919","versionConstraint":"< 17.0.10+7-1~20.04.1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-20919","fix":{"state":"fixed","versions":["17.0.10+7-1~20.04.1"],"available":[{"date":"2024-02-27","kind":"advisory","version":"17.0.10+7-1~20.04.1"}]},"cvss":[],"epss":[{"cve":"CVE-2024-20919","date":"2026-10-08","epss":0.00799,"percentile":0.55199}],"risk":0.3995,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-20919"},"relatedVulnerabilities":[{"id":"CVE-2024-20919","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2024-20919","date":"2026-10-08","epss":0.00799,"percentile":0.55199}],"urls":["https://www.oracle.com/security-alerts/cpujan2024.html","https://security.netapp.com/advisory/ntap-20240201-0002/","https://security.netapp.com/advisory/ntap-20241108-0002/","https://openjdk.org/groups/vulnerability/advisories/2024-01-16"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-20919","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"3c96e5014ea74a87","cpes":["cpe:2.3:a:bouncycastle-org:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk15on:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk15on:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov_jdk15on:1.60:*:*:*:*:*:*:*"],"name":"bcprov-jdk15on","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.60","type":"java-archive","version":"1.60","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","manifestName":"","pomArtifactID":"bcprov-jdk15on","archiveDigests":[{"value":"bd47ad3bd14b8e82595c7adaa143501e60842a84","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/bcprov-jdk15on-1.60.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-hr8g-6v94-x4m9","versionConstraint":">=1.49,<=1.70 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bcprov-jdk15on","version":"1.60"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-hr8g-6v94-x4m9","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-33201","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-33201","date":"2026-10-08","epss":0.00772,"percentile":0.54317}],"risk":0.39758000000000004,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2023-33201","https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc","https://github.com/bcgit/bc-java/wiki/CVE-2023-33201","https://bouncycastle.org/releasenotes.html#r1rv74","https://bouncycastle.org","https://lists.debian.org/debian-lts-announce/2023/08/msg00000.html","https://security.netapp.com/advisory/ntap-20230824-0008/","https://github.com/bcgit/bc-java/commit/ccf93ca736b89250ff4ce079a5aa56f5cbf0ebbd","https://github.com/bcgit/bc-java/commits/main/prov/src/main/java/org/bouncycastle/jce/provider/X509LDAPCertStoreSpi.java"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-hr8g-6v94-x4m9","description":"Bouncy Castle For Java LDAP injection vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2023-33201","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-33201","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-33201","date":"2026-10-08","epss":0.00772,"percentile":0.54317}],"urls":["https://bouncycastle.org","https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc","https://github.com/bcgit/bc-java/wiki/CVE-2023-33201","https://lists.debian.org/debian-lts-announce/2023/08/msg00000.html","https://security.netapp.com/advisory/ntap-20230824-0008/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-33201","description":"Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability. The vulnerability only affects applications that use an LDAP CertStore from Bouncy Castle to validate X.509 certificates. During the certificate validation process, Bouncy Castle inserts the certificate's Subject Name into an LDAP search filter without any escaping, which leads to an LDAP injection vulnerability."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-34180","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-34180","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-34180","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34180","date":"2026-10-08","epss":0.01311,"percentile":0.69792}],"risk":0.3933,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-34180"},"relatedVulnerabilities":[{"id":"CVE-2026-34180","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34180","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34180","date":"2026-10-08","epss":0.01311,"percentile":0.69792}],"urls":["https://github.com/openssl/openssl/commit/1c6908e4fa5fa568752221d8eaf561a809751e5d","https://github.com/openssl/openssl/commit/cbe418ae978539cf14a398a207dba834c0e93e83","https://github.com/openssl/openssl/commit/d93853c42110d6319e3df07842b488cb9f7ac5ff","https://github.com/openssl/openssl/commit/da5d62af75f69d6fbf7803743d7c56ac75461e43","https://github.com/openssl/openssl/commit/f696c73c3e61b8c502d040af62e690c060908a16","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34180","description":"Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive\nelement whose content exceeds 2 gigabytes in length may cause a heap buffer\nover-read on 64-bit Unix and Unix-like platforms.\n\nImpact summary: The heap buffer over-read may crash the application (Denial of\nService) or to load into the decoded ASN.1 object contents of memory beyond the\nend of the input buffer.  More typically such ASN.1 elements would instead be\ntruncated.\n\nAn integer truncation in OpenSSL's ASN.1 decoder causes the content length of\nan ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the\nworst case the truncated length is treated as a request to scan the binary\ncontent for a terminating zero byte, possibly causing OpenSSL to read either\nless than or beyond the end of the allocated buffer.\n\nApplications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or\nany other d2i_* decoding function are affected. OpenSSL's own command-line\ntools are not vulnerable, as data read through the BIO layer is checked before\nit reaches the affected code. The issue only affects 64-bit Unix and Unix-like\nplatforms; 32-bit platforms and 64-bit Windows are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-34180","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-34180","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-34180","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34180","date":"2026-10-08","epss":0.01311,"percentile":0.69792}],"risk":0.3933,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-34180"},"relatedVulnerabilities":[{"id":"CVE-2026-34180","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34180","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-34180","date":"2026-10-08","epss":0.01311,"percentile":0.69792}],"urls":["https://github.com/openssl/openssl/commit/1c6908e4fa5fa568752221d8eaf561a809751e5d","https://github.com/openssl/openssl/commit/cbe418ae978539cf14a398a207dba834c0e93e83","https://github.com/openssl/openssl/commit/d93853c42110d6319e3df07842b488cb9f7ac5ff","https://github.com/openssl/openssl/commit/da5d62af75f69d6fbf7803743d7c56ac75461e43","https://github.com/openssl/openssl/commit/f696c73c3e61b8c502d040af62e690c060908a16","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34180","description":"Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive\nelement whose content exceeds 2 gigabytes in length may cause a heap buffer\nover-read on 64-bit Unix and Unix-like platforms.\n\nImpact summary: The heap buffer over-read may crash the application (Denial of\nService) or to load into the decoded ASN.1 object contents of memory beyond the\nend of the input buffer.  More typically such ASN.1 elements would instead be\ntruncated.\n\nAn integer truncation in OpenSSL's ASN.1 decoder causes the content length of\nan ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the\nworst case the truncated length is treated as a request to scan the binary\ncontent for a terminating zero byte, possibly causing OpenSSL to read either\nless than or beyond the end of the allocated buffer.\n\nApplications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or\nany other d2i_* decoding function are affected. OpenSSL's own command-line\ntools are not vulnerable, as data read through the BIO layer is checked before\nit reaches the affected code. The issue only affects 64-bit Unix and Unix-like\nplatforms; 32-bit platforms and 64-bit Windows are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.10+7-1~20.04.1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-20932","versionConstraint":"< 17.0.10+7-1~20.04.1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-20932","fix":{"state":"fixed","versions":["17.0.10+7-1~20.04.1"],"available":[{"date":"2024-02-27","kind":"advisory","version":"17.0.10+7-1~20.04.1"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-20932","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-20932","date":"2026-10-08","epss":0.00782,"percentile":0.54613}],"risk":0.391,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-20932"},"relatedVulnerabilities":[{"id":"CVE-2024-20932","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-20932","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-20932","date":"2026-10-08","epss":0.00782,"percentile":0.54613}],"urls":["https://security.netapp.com/advisory/ntap-20240201-0002/","https://www.oracle.com/security-alerts/cpujan2024.html","https://openjdk.org/groups/vulnerability/advisories/2024-01-16"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-20932","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"98fdc73f40bd251a","cpes":["cpe:2.3:a:bouncycastle-org:bcpkix-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bcpkix_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcpkix-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bcpkix_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcpkix-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcpkix_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcpkix-jdk15on:bcpkix-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcpkix-jdk15on:bcpkix_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcpkix_jdk15on:bcpkix-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcpkix_jdk15on:bcpkix_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcpkix-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcpkix_jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcpkix:bcpkix-jdk15on:1.60:*:*:*:*:*:*:*","cpe:2.3:a:bcpkix:bcpkix_jdk15on:1.60:*:*:*:*:*:*:*"],"name":"bcpkix-jdk15on","purl":"pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.60","type":"java-archive","version":"1.60","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/usr/lib/unifi/lib/bcpkix-jdk15on-1.60.jar","manifestName":"","pomArtifactID":"bcpkix-jdk15on","archiveDigests":[{"value":"d0c46320fbc07be3a24eb13a56cee4e3d38e0c75","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/bcpkix-jdk15on-1.60.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/bcpkix-jdk15on-1.60.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.84"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wg6q-6289-32hp","versionConstraint":">=1.49,<1.84 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bcpkix-jdk15on","version":"1.60"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wg6q-6289-32hp","fix":{"state":"fixed","versions":["1.84"],"available":[{"date":"2026-04-17","kind":"first-observed","version":"1.84"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/U:Green","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5588","cwe":"CWE-327","type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630"},{"cve":"CVE-2026-5588","cwe":"CWE-347","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-5588","date":"2026-10-08","epss":0.00687,"percentile":0.51185}],"risk":0.388155,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-5588","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588","https://github.com/bcgit/bc-java/commit/656bae0dbd9b1521f840521ff786e78749fe3057"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wg6q-6289-32hp","description":"Bouncy Castle Crypto Package For Java: Use of a Broken or Risky Cryptographic Algorithm vulnerability in bcpkix modules"},"relatedVulnerabilities":[{"id":"CVE-2026-5588","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5588","cwe":"CWE-327","type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630"},{"cve":"CVE-2026-5588","cwe":"CWE-347","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-5588","date":"2026-10-08","epss":0.00687,"percentile":0.51185}],"urls":["https://github.com/bcgit/bc-java/commit/656bae0dbd9b1521f840521ff786e78749fe3057","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588","https://access.redhat.com/errata/RHSA-2026:11720","https://access.redhat.com/errata/RHSA-2026:11721","https://access.redhat.com/errata/RHSA-2026:13631","https://access.redhat.com/errata/RHSA-2026:14272","https://access.redhat.com/errata/RHSA-2026:14276","https://access.redhat.com/errata/RHSA-2026:17668","https://access.redhat.com/errata/RHSA-2026:18054","https://access.redhat.com/errata/RHSA-2026:18055","https://access.redhat.com/errata/RHSA-2026:18059","https://access.redhat.com/errata/RHSA-2026:21772","https://access.redhat.com/errata/RHSA-2026:53644","https://access.redhat.com/errata/RHSA-2026:53645","https://access.redhat.com/errata/RHSA-2026:53646","https://access.redhat.com/errata/RHSA-2026:60239","https://access.redhat.com/errata/RHSA-2026:60246","https://access.redhat.com/errata/RHSA-2026:60247","https://access.redhat.com/errata/RHSA-2026:60248","https://access.redhat.com/errata/RHSA-2026:60249","https://access.redhat.com/errata/RHSA-2026:60250","https://access.redhat.com/errata/RHSA-2026:60251","https://access.redhat.com/errata/RHSA-2026:60252","https://access.redhat.com/errata/RHSA-2026:60254","https://access.redhat.com/errata/RHSA-2026:60256","https://access.redhat.com/errata/RHSA-2026:60259","https://access.redhat.com/errata/RHSA-2026:66488","https://access.redhat.com/security/cve/CVE-2026-5588","https://bugzilla.redhat.com/show_bug.cgi?id=2458634","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5588.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5588","description":"Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules), Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All (pkix modules), Legion of the Bouncy Castle Inc. BCPIX-LTS bcpkix on All (pkix modules).\n\n This vulnerability is associated with program files JcaContentVerifierProviderBuilder.Java, JcaContentVerfierProviderBuilder.Java.\n\n\n\nThis issue affects BC-JAVA: from 1.67 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84; BCPKIX-FIPS: from 2.0.6 before 2.0.11, from 2.1.7 before 2.1.11; BCPIX-LTS: from 2.73.7 before 2.73.11."}]},{"artifact":{"id":"97badb9875b0c74a","cpes":["cpe:2.3:a:perl-base:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.4?arch=amd64&distro=ubuntu-20.04&upstream=perl","type":"deb","version":"5.30.0-9ubuntu0.4","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2011-10043","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"perl","version":"5.30.0-9ubuntu0.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2011-10043","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2011-10043","cwe":"CWE-145","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2011-10043","date":"2026-10-08","epss":0.00775,"percentile":0.54405}],"risk":0.3875,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2011-10043"},"relatedVulnerabilities":[{"id":"CVE-2011-10043","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2011-10043","cwe":"CWE-145","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2011-10043","date":"2026-10-08","epss":0.00775,"percentile":0.54405}],"urls":["https://blogs.perl.org/users/michael_g_schwern/2011/10/how-not-to-load-a-module-or-bad-interfaces-make-good-people-do-bad-things.html","https://metacpan.org/release/BINGOS/Module-Load-0.22/changes","https://metacpan.org/release/BINGOS/Module-Load-0.22/diff/BINGOS/Module-Load-0.20/lib/Module/Load.pm"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2011-10043","description":"Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded.\n\nModule names starting with \"::\" could be passed to the load function to specify arbitrary module paths.\n\nAttackers able to influence module names passed to load could use that bug to execute arbitrary code."}]},{"artifact":{"id":"c9a07c3b9df49ddb","cpes":["cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0-0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*"],"name":"libglib2.0-0","purl":"pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.6?arch=amd64&distro=ubuntu-20.04&upstream=glib2.0","type":"deb","version":"2.64.6-1~ubuntu20.04.6","language":"","licenses":["sha256:f65e92234e97932114d94d72fc898fcddc854345f77caae80af26ad5cd94cce8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libglib2.0-0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libglib2.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glib2.0"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.64.6-1~ubuntu20.04.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-34397","versionConstraint":"< 2.64.6-1~ubuntu20.04.7 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glib2.0","version":"2.64.6-1~ubuntu20.04.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-34397","fix":{"state":"fixed","versions":["2.64.6-1~ubuntu20.04.7"],"available":[{"date":"2024-05-09","kind":"advisory","version":"2.64.6-1~ubuntu20.04.7"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-34397","cwe":"CWE-290","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34397","date":"2026-10-08","epss":0.00763,"percentile":0.5399}],"risk":0.3815,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-34397"},"relatedVulnerabilities":[{"id":"CVE-2024-34397","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":5.2,"impactScore":4.3,"exploitabilityScore":1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-34397","cwe":"CWE-290","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-34397","date":"2026-10-08","epss":0.00763,"percentile":0.5399}],"urls":["https://gitlab.gnome.org/GNOME/glib/-/issues/3268","https://lists.debian.org/debian-lts-announce/2024/05/msg00008.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IRSFYAE5X23TNRWX7ZWEJOMISLCDSYNS/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCDY3KA7G7D3DRXYTT46K6LFHS2KHWBH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LL6HSJDXCXMLEIJBYV6CPOR4K2NTCTXW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNFJHISR4O6VFOHBFWH5I5WWMG37H63A/","https://security.netapp.com/advisory/ntap-20240531-0008/","https://www.openwall.com/lists/oss-security/2024/05/07/5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IRSFYAE5X23TNRWX7ZWEJOMISLCDSYNS/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LCDY3KA7G7D3DRXYTT46K6LFHS2KHWBH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LL6HSJDXCXMLEIJBYV6CPOR4K2NTCTXW/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UNFJHISR4O6VFOHBFWH5I5WWMG37H63A/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-34397","description":"An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact."}]},{"artifact":{"id":"42da88b6b6a23ef6","cpes":["cpe:2.3:a:libnss3:libnss3:2\\:3.49.1-1ubuntu1.9:*:*:*:*:*:*:*"],"name":"libnss3","purl":"pkg:deb/ubuntu/libnss3@2%3A3.49.1-1ubuntu1.9?arch=amd64&distro=ubuntu-20.04&upstream=nss","type":"deb","version":"2:3.49.1-1ubuntu1.9","language":"","licenses":["BSD-3","MIT","MPL-2.0","Zlib","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libnss3/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libnss3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libnss3:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libnss3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"nss"}]},"matchDetails":[{"fix":{"suggestedVersion":"2:3.98-0ubuntu0.20.04.1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-4421","versionConstraint":"< 2:3.98-0ubuntu0.20.04.1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"nss","version":"2:3.49.1-1ubuntu1.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-4421","fix":{"state":"fixed","versions":["2:3.98-0ubuntu0.20.04.1"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2:3.98-0ubuntu0.20.04.1"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-4421","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4421","date":"2026-10-08","epss":0.00762,"percentile":0.53969}],"risk":0.381,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-4421"},"relatedVulnerabilities":[{"id":"CVE-2023-4421","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-4421","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-4421","date":"2026-10-08","epss":0.00762,"percentile":0.53969}],"urls":["https://bugzilla.mozilla.org/show_bug.cgi?id=1651411","https://www.mozilla.org/security/advisories/mfsa2023-53/","https://lists.debian.org/debian-lts-announce/2023/10/msg00039.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-4421","description":"The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting Bleichenbacher-like attacks. Both the overall correctness of the padding as well as the length of the encrypted message was leaking through timing side-channel. By sending large number of attacker-selected ciphertexts, the attacker would be able to decrypt a previously intercepted PKCS#1 v1.5 ciphertext (for example, to decrypt a TLS session that used RSA key exchange), or forge a signature using the victim's key. The issue was fixed by implementing the implicit rejection algorithm, in which the NSS returns a deterministic random message in case invalid padding is detected, as proposed in the Marvin Attack paper. This vulnerability affects NSS < 3.61."}]},{"artifact":{"id":"e17b266d1d27c88b","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3","type":"java-archive","version":"2.13.3","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"56deb9ea2c93a7a556b3afbedd616d342963464e","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.18.10"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-gx83-3vf8-gh7j","versionConstraint":">=2.11.0,<2.18.10 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.13.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-gx83-3vf8-gh7j","fix":{"state":"fixed","versions":["2.18.10"],"available":[{"date":"2026-09-29","kind":"first-observed","version":"2.18.10"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83557","cwe":"CWE-502","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-83557","cwe":"CWE-915","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-83557","date":"2026-10-08","epss":0.00717,"percentile":0.52375}],"risk":0.38001,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-gx83-3vf8-gh7j","description":"jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)"},"relatedVulnerabilities":[{"id":"CVE-2026-83557","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83557","cwe":"CWE-502","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-83557","cwe":"CWE-915","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-83557","date":"2026-10-08","epss":0.00717,"percentile":0.52375}],"urls":["https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83557","description":"DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. It denies polymorphic resolution only for a fixed set of \"unsafe base types\", and its isSafeSubType method returns true unconditionally for every base type outside that set. java.lang.Comparable was absent from the list despite being implemented by a very large fraction of JDK and application classes, comparable in breadth to java.io.Serializable, which is on the list for that reason. An application declaring an @JsonTypeInfo-annotated property or class with Comparable as its base type, and no custom PolymorphicTypeValidator, will accept a type identifier for essentially any class implementing Comparable. This yields an attacker-controlled object instantiation primitive; a demonstrated case constructs a java.io.File for an arbitrary attacker-chosen path, which becomes path-traversal-adjacent if the application subsequently calls path-sensitive methods on the value. No class implementing Comparable has been identified that yields code execution through deserialization alone. Global Default Typing via activateDefaultTyping is not affected, because that method structurally requires an explicit PolymorphicTypeValidator argument. This affects com.fasterxml.jackson.core:jackson-databind from 2.11.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.118"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5mp6-jrq3-r938","versionConstraint":"<9.0.118 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-5mp6-jrq3-r938","fix":{"state":"fixed","versions":["9.0.118"],"available":[{"date":"2026-05-19","kind":"first-observed","version":"9.0.118"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-43513","cwe":"CWE-178","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-43513","date":"2026-10-08","epss":0.00503,"percentile":0.41085}],"risk":0.37725,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-43513","https://lists.apache.org/thread/ytjcgldshj73lcnd1sh95od5hrghwogp","http://www.openwall.com/lists/oss-security/2026/05/12/9","https://github.com/apache/tomcat/commit/4a90d3fa93988c447cd5bb7482f76ff70d7f15c2","https://github.com/apache/tomcat/commit/6dd75beb55bd42fc5f78e929596b25018cd17717","https://github.com/apache/tomcat/commit/83f3e51df7b87f5f6e626951c575ded1a512e8ef","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5mp6-jrq3-r938","description":"Apache Tomcat: LockOutRealm treats user names as case-sensitive"},"relatedVulnerabilities":[{"id":"CVE-2026-43513","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-43513","cwe":"CWE-178","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-43513","date":"2026-10-08","epss":0.00503,"percentile":0.41085}],"urls":["https://lists.apache.org/thread/ytjcgldshj73lcnd1sh95od5hrghwogp","http://www.openwall.com/lists/oss-security/2026/05/12/9"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-43513","description":"Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109.\nOlder unsupported versions may also be affected.\n\nUsers are recommended to upgrade to version 11.0.22, 10.1.55 or 9.0.118 which fix the issue."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.11+9-1~20.04.2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-21094","versionConstraint":"< 17.0.11+9-1~20.04.2 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-21094","fix":{"state":"fixed","versions":["17.0.11+9-1~20.04.2"],"available":[{"date":"2024-06-06","kind":"advisory","version":"17.0.11+9-1~20.04.2"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-21094","cwe":"CWE-349","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21094","date":"2026-10-08","epss":0.00752,"percentile":0.53603}],"risk":0.376,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-21094"},"relatedVulnerabilities":[{"id":"CVE-2024-21094","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21094","cwe":"CWE-349","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21094","date":"2026-10-08","epss":0.00752,"percentile":0.53603}],"urls":["https://lists.debian.org/debian-lts-announce/2024/04/msg00014.html","https://security.netapp.com/advisory/ntap-20240426-0004/","https://www.oracle.com/security-alerts/cpuapr2024.html","https://openjdk.org/groups/vulnerability/advisories/2024-04-16"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21094","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"f09b2a4cc479262d","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:core:2.13.3:*:*:*:*:*:*:*"],"name":"jackson-core","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3","type":"java-archive","version":"2.13.3","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/lib/unifi/lib/jackson-core-2.13.3.jar","manifestName":"","pomArtifactID":"jackson-core","archiveDigests":[{"value":"a27014716e4421684416e5fa83d896ddb87002da","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/jackson-core-2.13.3.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/jackson-core-2.13.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.18.8"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-r7wm-3cxj-wff9","versionConstraint":"<2.18.8 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-core","version":"2.13.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-r7wm-3cxj-wff9","fix":{"state":"fixed","versions":["2.18.8"],"available":[{"date":"2026-07-22","kind":"first-observed","version":"2.18.8"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-68494","cwe":"CWE-770","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-68494","date":"2026-10-08","epss":0.00463,"percentile":0.38164}],"risk":0.3750299999999999,"urls":["https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9","https://github.com/FasterXML/jackson-core/pull/1611","https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd","https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641","https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8","https://nvd.nist.gov/vuln/detail/CVE-2026-68494"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-r7wm-3cxj-wff9","description":"jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)"},"relatedVulnerabilities":[{"id":"CVE-2026-68494","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-68494","cwe":"CWE-770","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-68494","date":"2026-10-08","epss":0.00463,"percentile":0.38164}],"urls":["https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd","https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641","https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8","https://github.com/FasterXML/jackson-core/pull/1611","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9","https://github.com/advisories/GHSA-72hv-8253-57qq","https://www.cve.org/CVERecord?id=CVE-2026-18401"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-68494","description":"The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete. This record covers the remaining bypass.\n\nThe earlier fix wired validateIntegerLength() into a new _setIntLength() helper and invoked it wherever the integer portion of a number is decided: a terminator byte arrives, a '.' or 'e'/'E' is seen, or input ends inside a fully buffered value. It was not invoked on the attacker-relevant path where the parser runs out of input while still inside the MINOR_NUMBER_INTEGER_DIGITS minor state and returns NOT_AVAILABLE to the caller.\n\nAs a result, an attacker who streams JSON to a non-blocking parser in many small chunks, without ever sending a terminator byte, keeps the parser inside MINOR_NUMBER_INTEGER_DIGITS indefinitely. _textBuffer.expandCurrentSegment() grows the accumulator on every chunk while validateIntegerLength() is never called. The accumulator is bounded only by maxStringLength (20 MiB by default) rather than by maxNumberLength (1000 by default), an amplification of roughly 20,000x over the documented limit. Because Java char values occupy two bytes, a single connection can be driven to approximately 40 MiB of heap before the validator finally fires when the value completes.\n\nThe equivalent fraction-path code is correct: _finishFloatFraction() calls _setFractLength() before its NOT_AVAILABLE return. The missing call affects the integer-digit paths in _startPositiveNumber(), _startNegativeNumber() and _finishNumberIntegralPart() in NonBlockingUtf8JsonParserBase.\n\nImpact: reactive frameworks such as Spring WebFlux/Reactor, Quarkus, Helidon and Vert.x feed inbound HTTP or gRPC bytes to the async parser as they arrive, which is precisely the chunked-feed shape required. Operators who set StreamReadConstraints.maxNumberLength expecting it to cap memory per number value do not get that guarantee; memory accumulates per concurrent connection and attacker-controlled concurrency can exhaust the JVM heap. The synchronous parsers (UTF8StreamJsonParser, ReaderBasedJsonParser) and the async parser operating on complete input are not affected.\n\nExploitation requires only the ability to stream data to a parsing endpoint; no privileges or user interaction are needed.\n\nThis issue affects com.fasterxml.jackson.core:jackson-core from version 2.15.0 through 2.18.7, and from 2.19.0 through 2.21.3, and tools.jackson.core:jackson-core from 3.0.0 through 3.1.3. Versions prior to 2.15.0 are not affected, because StreamReadConstraints -- which defines the maxNumberLength setting -- was first introduced in jackson-core 2.15.0, so no such constraint exists to be bypassed in earlier releases. Note that GHSA-r7wm-3cxj-wff9 states the affected 2.x range without a lower bound. The 2.22.x and 3.2.x release lines are not affected: those branches were created after the fix commit landed on 2026-05-21 and therefore contain it from their initial releases (2.22.0, tagged 2026-06-03, and 3.2.0, tagged 2026-06-08)."}]},{"artifact":{"id":"02a2cda4e2596879","cpes":["cpe:2.3:a:curl:curl:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-6253","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-6253","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6253","date":"2026-10-08","epss":0.0075,"percentile":0.53553}],"risk":0.375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-6253"},"relatedVulnerabilities":[{"id":"CVE-2026-6253","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6253","date":"2026-10-08","epss":0.0075,"percentile":0.53553}],"urls":["https://curl.se/docs/CVE-2026-6253.html","https://curl.se/docs/CVE-2026-6253.json","https://hackerone.com/reports/3669637","http://www.openwall.com/lists/oss-security/2026/04/29/11"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6253","description":"curl might erroneously pass on credentials for a first proxy to a second\nproxy.\n\nThis can happen when the following conditions are true:\n\n1. curl is setup to use specific different proxies for different URL schemes\n2. the first proxy needs credentials\n3. the second proxy uses no credentials\n4. while using the first proxy (using say `http://`), curl is asked to follow\n   a redirect to a URL using another scheme (say `https://`), accessed using a\n   second, different, proxy"}]},{"artifact":{"id":"5bfe812075df9ecc","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04&upstream=curl","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6253","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-6253","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6253","date":"2026-10-08","epss":0.0075,"percentile":0.53553}],"risk":0.375,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-6253"},"relatedVulnerabilities":[{"id":"CVE-2026-6253","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-6253","cwe":"CWE-522","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-6253","date":"2026-10-08","epss":0.0075,"percentile":0.53553}],"urls":["https://curl.se/docs/CVE-2026-6253.html","https://curl.se/docs/CVE-2026-6253.json","https://hackerone.com/reports/3669637","http://www.openwall.com/lists/oss-security/2026/04/29/11"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6253","description":"curl might erroneously pass on credentials for a first proxy to a second\nproxy.\n\nThis can happen when the following conditions are true:\n\n1. curl is setup to use specific different proxies for different URL schemes\n2. the first proxy needs credentials\n3. the second proxy uses no credentials\n4. while using the first proxy (using say `http://`), curl is asked to follow\n   a redirect to a URL using another scheme (say `https://`), accessed using a\n   second, different, proxy"}]},{"artifact":{"id":"c1afe861706c7168","cpes":["cpe:2.3:a:krb5-locales:krb5-locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5-locales:krb5_locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5_locales:krb5-locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5_locales:krb5_locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"krb5-locales","purl":"pkg:deb/ubuntu/krb5-locales@1.17-6ubuntu4.4?arch=all&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/krb5-locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/krb5-locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/krb5-locales.list"}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37370","versionConstraint":"< 1.17-6ubuntu4.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-37370","fix":{"state":"fixed","versions":["1.17-6ubuntu4.6"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.17-6ubuntu4.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"risk":0.374,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37370"},"relatedVulnerabilities":[{"id":"CVE-2024-37370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0007/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."}]},{"artifact":{"id":"b88197ff1a531432","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37370","versionConstraint":"< 1.17-6ubuntu4.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-37370","fix":{"state":"fixed","versions":["1.17-6ubuntu4.6"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.17-6ubuntu4.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"risk":0.374,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37370"},"relatedVulnerabilities":[{"id":"CVE-2024-37370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0007/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."}]},{"artifact":{"id":"205c4946e1a25685","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37370","versionConstraint":"< 1.17-6ubuntu4.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-37370","fix":{"state":"fixed","versions":["1.17-6ubuntu4.6"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.17-6ubuntu4.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"risk":0.374,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37370"},"relatedVulnerabilities":[{"id":"CVE-2024-37370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0007/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."}]},{"artifact":{"id":"6a71efc1099a31f1","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37370","versionConstraint":"< 1.17-6ubuntu4.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-37370","fix":{"state":"fixed","versions":["1.17-6ubuntu4.6"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.17-6ubuntu4.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"risk":0.374,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37370"},"relatedVulnerabilities":[{"id":"CVE-2024-37370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0007/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."}]},{"artifact":{"id":"08cd2db1dbbc7a60","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-37370","versionConstraint":"< 1.17-6ubuntu4.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-37370","fix":{"state":"fixed","versions":["1.17-6ubuntu4.6"],"available":[{"date":"2024-08-08","kind":"advisory","version":"1.17-6ubuntu4.6"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"risk":0.374,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-37370"},"relatedVulnerabilities":[{"id":"CVE-2024-37370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-37370","cwe":"CWE-345","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-37370","date":"2026-10-08","epss":0.00748,"percentile":0.53489}],"urls":["https://github.com/krb5/krb5/commit/55fbf435edbe2e92dd8101669b1ce7144bc96fef","https://web.mit.edu/kerberos/www/advisories/","https://security.netapp.com/advisory/ntap-20241108-0007/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-37370","description":"In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to the application."}]},{"artifact":{"id":"3640cf00fde88f22","cpes":["cpe:2.3:a:binutils:binutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.10"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-0840","versionConstraint":"< 2.34-6ubuntu1.10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-0840","fix":{"state":"fixed","versions":["2.34-6ubuntu1.10"],"available":[{"date":"2025-02-26","kind":"advisory","version":"2.34-6ubuntu1.10"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-0840","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-121","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-0840","date":"2026-10-08","epss":0.00747,"percentile":0.53441}],"risk":0.3735,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-0840"},"relatedVulnerabilities":[{"id":"CVE-2025-0840","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-0840","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-121","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-0840","date":"2026-10-08","epss":0.00747,"percentile":0.53441}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15882","https://sourceware.org/bugzilla/show_bug.cgi?id=32560","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=baac6c221e9d69335bf41366a1c7d87d8ab2f893","https://vuldb.com/?ctiid.293997","https://vuldb.com/?id.293997","https://vuldb.com/?submit.485255","https://www.gnu.org/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-0840","description":"A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"197555b9cdbc0e71","cpes":["cpe:2.3:a:binutils-common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-common","purl":"pkg:deb/ubuntu/binutils-common@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-0840","versionConstraint":"< 2.34-6ubuntu1.10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-0840","fix":{"state":"fixed","versions":["2.34-6ubuntu1.10"],"available":[{"date":"2025-02-26","kind":"advisory","version":"2.34-6ubuntu1.10"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-0840","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-121","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-0840","date":"2026-10-08","epss":0.00747,"percentile":0.53441}],"risk":0.3735,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-0840"},"relatedVulnerabilities":[{"id":"CVE-2025-0840","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-0840","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-121","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-0840","date":"2026-10-08","epss":0.00747,"percentile":0.53441}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15882","https://sourceware.org/bugzilla/show_bug.cgi?id=32560","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=baac6c221e9d69335bf41366a1c7d87d8ab2f893","https://vuldb.com/?ctiid.293997","https://vuldb.com/?id.293997","https://vuldb.com/?submit.485255","https://www.gnu.org/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-0840","description":"A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"436f5c90439c5365","cpes":["cpe:2.3:a:binutils-x86-64-linux-gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux-gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/binutils-x86-64-linux-gnu@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list"}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-0840","versionConstraint":"< 2.34-6ubuntu1.10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-0840","fix":{"state":"fixed","versions":["2.34-6ubuntu1.10"],"available":[{"date":"2025-02-26","kind":"advisory","version":"2.34-6ubuntu1.10"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-0840","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-121","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-0840","date":"2026-10-08","epss":0.00747,"percentile":0.53441}],"risk":0.3735,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-0840"},"relatedVulnerabilities":[{"id":"CVE-2025-0840","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-0840","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-121","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-0840","date":"2026-10-08","epss":0.00747,"percentile":0.53441}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15882","https://sourceware.org/bugzilla/show_bug.cgi?id=32560","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=baac6c221e9d69335bf41366a1c7d87d8ab2f893","https://vuldb.com/?ctiid.293997","https://vuldb.com/?id.293997","https://vuldb.com/?submit.485255","https://www.gnu.org/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-0840","description":"A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"e8585c2fc66c583c","cpes":["cpe:2.3:a:libbinutils:libbinutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libbinutils","purl":"pkg:deb/ubuntu/libbinutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libbinutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-0840","versionConstraint":"< 2.34-6ubuntu1.10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-0840","fix":{"state":"fixed","versions":["2.34-6ubuntu1.10"],"available":[{"date":"2025-02-26","kind":"advisory","version":"2.34-6ubuntu1.10"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-0840","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-121","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-0840","date":"2026-10-08","epss":0.00747,"percentile":0.53441}],"risk":0.3735,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-0840"},"relatedVulnerabilities":[{"id":"CVE-2025-0840","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-0840","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-121","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-0840","date":"2026-10-08","epss":0.00747,"percentile":0.53441}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15882","https://sourceware.org/bugzilla/show_bug.cgi?id=32560","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=baac6c221e9d69335bf41366a1c7d87d8ab2f893","https://vuldb.com/?ctiid.293997","https://vuldb.com/?id.293997","https://vuldb.com/?submit.485255","https://www.gnu.org/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-0840","description":"A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"e9c23578b20f9960","cpes":["cpe:2.3:a:libctf-nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf-nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf-nobfd0","purl":"pkg:deb/ubuntu/libctf-nobfd0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libctf-nobfd0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf-nobfd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-0840","versionConstraint":"< 2.34-6ubuntu1.10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-0840","fix":{"state":"fixed","versions":["2.34-6ubuntu1.10"],"available":[{"date":"2025-02-26","kind":"advisory","version":"2.34-6ubuntu1.10"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-0840","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-121","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-0840","date":"2026-10-08","epss":0.00747,"percentile":0.53441}],"risk":0.3735,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-0840"},"relatedVulnerabilities":[{"id":"CVE-2025-0840","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-0840","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-121","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-0840","date":"2026-10-08","epss":0.00747,"percentile":0.53441}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15882","https://sourceware.org/bugzilla/show_bug.cgi?id=32560","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=baac6c221e9d69335bf41366a1c7d87d8ab2f893","https://vuldb.com/?ctiid.293997","https://vuldb.com/?id.293997","https://vuldb.com/?submit.485255","https://www.gnu.org/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-0840","description":"A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"5a72139b32f71a25","cpes":["cpe:2.3:a:libctf0:libctf0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf0","purl":"pkg:deb/ubuntu/libctf0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-0840","versionConstraint":"< 2.34-6ubuntu1.10 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-0840","fix":{"state":"fixed","versions":["2.34-6ubuntu1.10"],"available":[{"date":"2025-02-26","kind":"advisory","version":"2.34-6ubuntu1.10"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-0840","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-121","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-0840","date":"2026-10-08","epss":0.00747,"percentile":0.53441}],"risk":0.3735,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-0840"},"relatedVulnerabilities":[{"id":"CVE-2025-0840","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-0840","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-121","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-0840","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-0840","date":"2026-10-08","epss":0.00747,"percentile":0.53441}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15882","https://sourceware.org/bugzilla/show_bug.cgi?id=32560","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=baac6c221e9d69335bf41366a1c7d87d8ab2f893","https://vuldb.com/?ctiid.293997","https://vuldb.com/?id.293997","https://vuldb.com/?submit.485255","https://www.gnu.org/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-0840","description":"A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"33bfbfa0d7f4ffac","cpes":["cpe:2.3:a:org.springframework:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-webmvc:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-webmvc:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_webmvc:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_webmvc:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_webmvc:5.3.22:*:*:*:*:*:*:*"],"name":"spring-webmvc","purl":"pkg:maven/org.springframework/spring-webmvc@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","manifestName":"","pomArtifactID":"spring-webmvc","archiveDigests":[{"value":"519d86b7ac9b8b6bb54739eb4eb73dc13a263b28","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"5.3.42"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-w3c8-7r8f-9jp8","versionConstraint":">=5.3.0,<5.3.42 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-webmvc","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-w3c8-7r8f-9jp8","fix":{"state":"fixed","versions":["5.3.42"],"available":[{"date":"2025-01-11","kind":"first-observed","version":"5.3.42"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38828","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38828","date":"2026-10-08","epss":0.00724,"percentile":0.52608}],"risk":0.37285999999999997,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-38828","https://spring.io/security/cve-2024-38828","https://security.netapp.com/advisory/ntap-20250509-0009"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-w3c8-7r8f-9jp8","description":"Spring MVC controller vulnerable to a DoS attack"},"relatedVulnerabilities":[{"id":"CVE-2024-38828","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38828","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38828","date":"2026-10-08","epss":0.00724,"percentile":0.52608}],"urls":["https://spring.io/security/cve-2024-38828","https://security.netapp.com/advisory/ntap-20250509-0009/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-38828","description":"Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack."}]},{"artifact":{"id":"cbeb1ac80586032b","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.9-1ubuntu0.6:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.2.9-1ubuntu0.6?arch=amd64&distro=ubuntu-20.04&upstream=expat","type":"deb","version":"2.2.9-1ubuntu0.6","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-66046","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"expat","version":"2.2.9-1ubuntu0.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-66046","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-66046","cwe":"CWE-407","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66046","date":"2026-10-08","epss":0.00742,"percentile":0.53269}],"risk":0.371,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-66046"},"relatedVulnerabilities":[{"id":"CVE-2026-66046","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-66046","cwe":"CWE-407","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-66046","date":"2026-10-08","epss":0.00742,"percentile":0.53269}],"urls":["https://github.com/libexpat/libexpat/pull/1321","https://www.vulncheck.com/advisories/expat-denial-of-service-via-storeatts-quadratic-complexity"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-66046","description":"Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an O(N^2) linear scan of elementType->defaultAtts to determine CDATA status. A remote unauthenticated attacker can supply a single well-formed XML document of a few megabytes to an application parsing untrusted XML to cause excessive CPU consumption, resulting in denial of service without requiring authentication, external entity resolution, or non-default parser options."}]},{"artifact":{"id":"f09b2a4cc479262d","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:core:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:core:2.13.3:*:*:*:*:*:*:*"],"name":"jackson-core","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3","type":"java-archive","version":"2.13.3","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/lib/unifi/lib/jackson-core-2.13.3.jar","manifestName":"","pomArtifactID":"jackson-core","archiveDigests":[{"value":"a27014716e4421684416e5fa83d896ddb87002da","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/jackson-core-2.13.3.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/jackson-core-2.13.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.18.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7hhh-6rmp-j9qf","versionConstraint":">=2.8.0,<=2.18.10 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-core","version":"2.13.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-7hhh-6rmp-j9qf","fix":{"state":"fixed","versions":["2.18.11"],"available":[{"date":"2026-10-01","kind":"first-observed","version":"2.18.11"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89425","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-89425","cwe":"CWE-770","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-89425","date":"2026-10-08","epss":0.00492,"percentile":0.4033}],"risk":0.369,"urls":["https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf","https://nvd.nist.gov/vuln/detail/CVE-2026-89425","https://github.com/FasterXML/jackson-core/pull/1698","https://github.com/FasterXML/jackson-core/commit/211cf2c5d91abbec38067f37efc1363cd4e88ee3","https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-2.18.11","https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-3.2.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7hhh-6rmp-j9qf","description":"jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)"},"relatedVulnerabilities":[{"id":"CVE-2026-89425","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89425","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-89425","cwe":"CWE-770","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-89425","date":"2026-10-08","epss":0.00492,"percentile":0.4033}],"urls":["https://github.com/FasterXML/jackson-core/pull/1698","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89425","description":"UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBuilder in a loop that has no upper bound. Unlike the three sibling parser implementations, including UTF8StreamJsonParser, it never consults ErrorReportConfiguration.getMaxErrorTokenLength() (default 256). A malformed token supplied to a parser created through JsonFactory.createParser(DataInput) is therefore accumulated in full. No StreamReadConstraints setting mitigates this: maxDocumentLength cannot be applied to DataInput sources at all, and maxStringLength does not cover this path because the accumulation bypasses ReadConstrainedTextBuffer. The reporter measured a 20,000,109-character exception message from a 20-million-character malformed token on the DataInput path, against 367 characters for identical input on the InputStream path. Scaling the payload drives the StringBuilder, which also incurs byte-to-char expansion and internal array doubling, to many times the raw payload size and can trigger OutOfMemoryError for the whole JVM. UTF8DataInputJsonParser was introduced in 2.8.0 together with createParser(DataInput); releases before 2.8.0 do not contain the affected class."}]},{"artifact":{"id":"e17b266d1d27c88b","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3","type":"java-archive","version":"2.13.3","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"56deb9ea2c93a7a556b3afbedd616d342963464e","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.14.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-3wrr-7qpf-2prh","versionConstraint":">=2.10.0,<=2.13.5 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.13.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-3wrr-7qpf-2prh","fix":{"state":"fixed","versions":["2.14.0"],"available":[{"date":"2026-06-24","kind":"first-observed","version":"2.14.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-50193","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-50193","date":"2026-10-08","epss":0.00616,"percentile":0.47912}],"risk":0.36651999999999996,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh","https://github.com/FasterXML/jackson-databind/issues/3447","https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c","https://nvd.nist.gov/vuln/detail/CVE-2026-50193"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-3wrr-7qpf-2prh","description":"jackson-databind: Deeply nested JsonNode throws StackOverflowError for toString()"},"relatedVulnerabilities":[{"id":"CVE-2026-50193","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-50193","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-50193","date":"2026-10-08","epss":0.00616,"percentile":0.47912}],"urls":["https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c","https://github.com/FasterXML/jackson-databind/issues/3447","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-50193","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.13.0 until 2.14.0, a potential Denial-of-Service exists when attacker sends deeply nested JSON if (and only if) the service reads deeply nested (1000s of levels) JSON as JsonNode (ObjectMapper.readTree()) and writes out same (or modifided) node using JsonNode.toString(). This can consume significant amount of resources with concurrent relatively small requests (1000 nested arrays is 2kB). This vulnerability is fixed in 2.14.0."}]},{"artifact":{"id":"02a2cda4e2596879","cpes":["cpe:2.3:a:curl:curl:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"7.68.0-1ubuntu2.24"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-8096","versionConstraint":"< 7.68.0-1ubuntu2.24 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-8096","fix":{"state":"fixed","versions":["7.68.0-1ubuntu2.24"],"available":[{"date":"2024-09-16","kind":"advisory","version":"7.68.0-1ubuntu2.24"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-8096","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-8096","date":"2026-10-08","epss":0.00729,"percentile":0.52825}],"risk":0.3645,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-8096"},"relatedVulnerabilities":[{"id":"CVE-2024-8096","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-8096","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-8096","date":"2026-10-08","epss":0.00729,"percentile":0.52825}],"urls":["https://curl.se/docs/CVE-2024-8096.html","https://curl.se/docs/CVE-2024-8096.json","https://hackerone.com/reports/2669852","http://www.openwall.com/lists/oss-security/2024/09/11/1","https://lists.debian.org/debian-lts-announce/2024/11/msg00008.html","https://security.netapp.com/advisory/ntap-20241011-0005/","https://github.com/curl/curl/commit/aeb1a281cab13c7ba"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-8096","description":"When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine.  If the returned status reports another error than 'revoked' (like for example 'unauthorized') it is not treated as a bad certficate."}]},{"artifact":{"id":"5bfe812075df9ecc","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04&upstream=curl","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"7.68.0-1ubuntu2.24"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-8096","versionConstraint":"< 7.68.0-1ubuntu2.24 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-8096","fix":{"state":"fixed","versions":["7.68.0-1ubuntu2.24"],"available":[{"date":"2024-09-16","kind":"advisory","version":"7.68.0-1ubuntu2.24"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-8096","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-8096","date":"2026-10-08","epss":0.00729,"percentile":0.52825}],"risk":0.3645,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-8096"},"relatedVulnerabilities":[{"id":"CVE-2024-8096","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-8096","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-8096","date":"2026-10-08","epss":0.00729,"percentile":0.52825}],"urls":["https://curl.se/docs/CVE-2024-8096.html","https://curl.se/docs/CVE-2024-8096.json","https://hackerone.com/reports/2669852","http://www.openwall.com/lists/oss-security/2024/09/11/1","https://lists.debian.org/debian-lts-announce/2024/11/msg00008.html","https://security.netapp.com/advisory/ntap-20241011-0005/","https://github.com/curl/curl/commit/aeb1a281cab13c7ba"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-8096","description":"When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine.  If the returned status reports another error than 'revoked' (like for example 'unauthorized') it is not treated as a bad certficate."}]},{"artifact":{"id":"0ecb0928f40bd774","cpes":["cpe:2.3:a:libssh-4:libssh-4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh-4:libssh_4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh_4:libssh-4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh_4:libssh_4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh-4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh_4:0.9.3-2ubuntu2.4:*:*:*:*:*:*:*"],"name":"libssh-4","purl":"pkg:deb/ubuntu/libssh-4@0.9.3-2ubuntu2.4?arch=amd64&distro=ubuntu-20.04&upstream=libssh","type":"deb","version":"0.9.3-2ubuntu2.4","language":"","licenses":["BSD-2-clause","BSD-3-clause","LGPL-2.1","LGPL-2.1+~OpenSSL","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssh-4/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssh-4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssh-4:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssh-4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-59843","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"libssh","version":"0.9.3-2ubuntu2.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-59843","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-59843","cwe":"CWE-835","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-59843","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-59843","date":"2026-10-08","epss":0.00725,"percentile":0.52664}],"risk":0.36250000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-59843"},"relatedVulnerabilities":[{"id":"CVE-2026-59843","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59843","cwe":"CWE-835","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-59843","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-59843","date":"2026-10-08","epss":0.00725,"percentile":0.52664}],"urls":["https://access.redhat.com/errata/RHSA-2026:42922","https://access.redhat.com/errata/RHSA-2026:55855","https://access.redhat.com/errata/RHSA-2026:62217","https://access.redhat.com/errata/RHSA-2026:62218","https://access.redhat.com/security/cve/CVE-2026-59843","https://bugzilla.redhat.com/show_bug.cgi?id=2498176"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59843","description":"A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.6.13-2ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-28834","versionConstraint":"< 3.6.13-2ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-28834","fix":{"state":"fixed","versions":["3.6.13-2ubuntu1.11"],"available":[{"date":"2024-04-15","kind":"advisory","version":"3.6.13-2ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-28834","cwe":"CWE-327","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-28834","date":"2026-10-08","epss":0.00724,"percentile":0.52616}],"risk":0.362,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-28834"},"relatedVulnerabilities":[{"id":"CVE-2024-28834","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-28834","cwe":"CWE-327","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-28834","date":"2026-10-08","epss":0.00724,"percentile":0.52616}],"urls":["https://access.redhat.com/errata/RHSA-2024:1784","https://access.redhat.com/errata/RHSA-2024:1879","https://access.redhat.com/errata/RHSA-2024:1997","https://access.redhat.com/errata/RHSA-2024:2044","https://access.redhat.com/errata/RHSA-2024:2570","https://access.redhat.com/errata/RHSA-2024:2889","https://access.redhat.com/security/cve/CVE-2024-28834","https://bugzilla.redhat.com/show_bug.cgi?id=2269228","https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html","https://minerva.crocs.fi.muni.cz/","http://www.openwall.com/lists/oss-security/2024/03/22/1","http://www.openwall.com/lists/oss-security/2024/03/22/2","https://lists.debian.org/debian-lts-announce/2024/09/msg00019.html","https://people.redhat.com/~hkario/marvin/","https://security.netapp.com/advisory/ntap-20240524-0004/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-28834","description":"A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel."}]},{"artifact":{"id":"c9a07c3b9df49ddb","cpes":["cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0-0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*"],"name":"libglib2.0-0","purl":"pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.6?arch=amd64&distro=ubuntu-20.04&upstream=glib2.0","type":"deb","version":"2.64.6-1~ubuntu20.04.6","language":"","licenses":["sha256:f65e92234e97932114d94d72fc898fcddc854345f77caae80af26ad5cd94cce8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libglib2.0-0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libglib2.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glib2.0"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-58014","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glib2.0","version":"2.64.6-1~ubuntu20.04.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-58014","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-58014","cwe":"CWE-193","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-58014","date":"2026-10-08","epss":0.00722,"percentile":0.52535}],"risk":0.361,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-58014"},"relatedVulnerabilities":[{"id":"CVE-2026-58014","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58014","cwe":"CWE-193","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-58014","date":"2026-10-08","epss":0.00722,"percentile":0.52535}],"urls":["https://access.redhat.com/errata/RHSA-2026:49512","https://access.redhat.com/errata/RHSA-2026:55440","https://access.redhat.com/errata/RHSA-2026:57015","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:61766","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:63135","https://access.redhat.com/errata/RHSA-2026:63138","https://access.redhat.com/errata/RHSA-2026:63140","https://access.redhat.com/errata/RHSA-2026:65762","https://access.redhat.com/errata/RHSA-2026:65763","https://access.redhat.com/errata/RHSA-2026:65767","https://access.redhat.com/errata/RHSA-2026:65768","https://access.redhat.com/errata/RHSA-2026:65769","https://access.redhat.com/errata/RHSA-2026:65770","https://access.redhat.com/errata/RHSA-2026:65771","https://access.redhat.com/errata/RHSA-2026:65773","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:66357","https://access.redhat.com/errata/RHSA-2026:70586","https://access.redhat.com/errata/RHSA-2026:70646","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:73851","https://access.redhat.com/errata/RHSA-2026:73859","https://access.redhat.com/errata/RHSA-2026:73909","https://access.redhat.com/errata/RHSA-2026:73929","https://access.redhat.com/errata/RHSA-2026:73930","https://access.redhat.com/errata/RHSA-2026:73959","https://access.redhat.com/errata/RHSA-2026:73960","https://access.redhat.com/errata/RHSA-2026:73961","https://access.redhat.com/errata/RHSA-2026:73962","https://access.redhat.com/errata/RHSA-2026:74458","https://access.redhat.com/errata/RHSA-2026:74459","https://access.redhat.com/errata/RHSA-2026:74460","https://access.redhat.com/errata/RHSA-2026:74461","https://access.redhat.com/errata/RHSA-2026:74462","https://access.redhat.com/errata/RHSA-2026:74463","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/errata/RHSA-2026:74677","https://access.redhat.com/errata/RHSA-2026:74678","https://access.redhat.com/errata/RHSA-2026:74679","https://access.redhat.com/errata/RHSA-2026:74681","https://access.redhat.com/errata/RHSA-2026:74683","https://access.redhat.com/errata/RHSA-2026:74685","https://access.redhat.com/errata/RHSA-2026:74687","https://access.redhat.com/errata/RHSA-2026:74688","https://access.redhat.com/errata/RHSA-2026:74771","https://access.redhat.com/errata/RHSA-2026:75652","https://access.redhat.com/errata/RHSA-2026:75654","https://access.redhat.com/errata/RHSA-2026:75655","https://access.redhat.com/errata/RHSA-2026:75657","https://access.redhat.com/errata/RHSA-2026:75658","https://access.redhat.com/errata/RHSA-2026:75659","https://access.redhat.com/errata/RHSA-2026:75660","https://access.redhat.com/errata/RHSA-2026:76042","https://access.redhat.com/security/cve/CVE-2026-58014","https://bugzilla.redhat.com/show_bug.cgi?id=2492255","https://gitlab.gnome.org/GNOME/glib/-/issues/3930"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58014","description":"A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary."}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5450","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-5450","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-08","epss":0.00718,"percentile":0.52433}],"risk":0.359,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-5450"},"relatedVulnerabilities":[{"id":"CVE-2026-5450","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-08","epss":0.00718,"percentile":0.52433}],"urls":["https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5450","description":"Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5450","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-5450","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-08","epss":0.00718,"percentile":0.52433}],"risk":0.359,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-5450"},"relatedVulnerabilities":[{"id":"CVE-2026-5450","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-08","epss":0.00718,"percentile":0.52433}],"urls":["https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5450","description":"Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow."}]},{"artifact":{"id":"b082b70df3e54e06","cpes":["cpe:2.3:a:locales:locales:2.31-0ubuntu9.14:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.31-0ubuntu9.14?arch=all&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.14","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-5450","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.14"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-5450","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-08","epss":0.00718,"percentile":0.52433}],"risk":0.359,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-5450"},"relatedVulnerabilities":[{"id":"CVE-2026-5450","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5450","cwe":"CWE-122","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"cve":"CVE-2026-5450","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-5450","date":"2026-10-08","epss":0.00718,"percentile":0.52433}],"urls":["https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5450","description":"Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow."}]},{"artifact":{"id":"68a933b61e16a6b4","cpes":["cpe:2.3:a:libpng16-16:libpng16-16:1.6.37-2:*:*:*:*:*:*:*","cpe:2.3:a:libpng16-16:libpng16_16:1.6.37-2:*:*:*:*:*:*:*","cpe:2.3:a:libpng16_16:libpng16-16:1.6.37-2:*:*:*:*:*:*:*","cpe:2.3:a:libpng16_16:libpng16_16:1.6.37-2:*:*:*:*:*:*:*","cpe:2.3:a:libpng16:libpng16-16:1.6.37-2:*:*:*:*:*:*:*","cpe:2.3:a:libpng16:libpng16_16:1.6.37-2:*:*:*:*:*:*:*"],"name":"libpng16-16","purl":"pkg:deb/ubuntu/libpng16-16@1.6.37-2?arch=amd64&distro=ubuntu-20.04&upstream=libpng1.6","type":"deb","version":"1.6.37-2","language":"","licenses":["Apache-2.0","BSD-3-clause","BSD-like-with-advertising-clause","GPL-2","GPL-2+","expat","libpng"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpng16-16/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libpng16-16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpng16-16:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libpng16-16:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libpng1.6"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-25646","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"libpng1.6","version":"1.6.37-2"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-25646","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-25646","cwe":"CWE-122","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-25646","cwe":"CWE-126","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-25646","cwe":"CWE-125","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-25646","date":"2026-10-08","epss":0.00718,"percentile":0.52432}],"risk":0.359,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-25646"},"relatedVulnerabilities":[{"id":"CVE-2026-25646","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-25646","cwe":"CWE-122","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-25646","cwe":"CWE-126","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-25646","cwe":"CWE-125","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-25646","date":"2026-10-08","epss":0.00718,"percentile":0.52432}],"urls":["https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88","https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3","http://www.openwall.com/lists/oss-security/2026/02/09/7","https://access.redhat.com/errata/RHSA-2026:10097","https://access.redhat.com/errata/RHSA-2026:12274","https://access.redhat.com/errata/RHSA-2026:14773","https://access.redhat.com/errata/RHSA-2026:15087","https://access.redhat.com/errata/RHSA-2026:16174","https://access.redhat.com/errata/RHSA-2026:17596","https://access.redhat.com/errata/RHSA-2026:3031","https://access.redhat.com/errata/RHSA-2026:3405","https://access.redhat.com/errata/RHSA-2026:3551","https://access.redhat.com/errata/RHSA-2026:3573","https://access.redhat.com/errata/RHSA-2026:3574","https://access.redhat.com/errata/RHSA-2026:3575","https://access.redhat.com/errata/RHSA-2026:3576","https://access.redhat.com/errata/RHSA-2026:3577","https://access.redhat.com/errata/RHSA-2026:3968","https://access.redhat.com/errata/RHSA-2026:3969","https://access.redhat.com/errata/RHSA-2026:4221","https://access.redhat.com/errata/RHSA-2026:4222","https://access.redhat.com/errata/RHSA-2026:4306","https://access.redhat.com/errata/RHSA-2026:4501","https://access.redhat.com/errata/RHSA-2026:4728","https://access.redhat.com/errata/RHSA-2026:4729","https://access.redhat.com/errata/RHSA-2026:4730","https://access.redhat.com/errata/RHSA-2026:4731","https://access.redhat.com/errata/RHSA-2026:4732","https://access.redhat.com/errata/RHSA-2026:4756","https://access.redhat.com/errata/RHSA-2026:5606","https://access.redhat.com/errata/RHSA-2026:6439","https://access.redhat.com/errata/RHSA-2026:6445","https://access.redhat.com/errata/RHSA-2026:6466","https://access.redhat.com/errata/RHSA-2026:6467","https://access.redhat.com/errata/RHSA-2026:6468","https://access.redhat.com/errata/RHSA-2026:6469","https://access.redhat.com/errata/RHSA-2026:6553","https://access.redhat.com/errata/RHSA-2026:6732","https://access.redhat.com/errata/RHSA-2026:7032","https://access.redhat.com/errata/RHSA-2026:7033","https://access.redhat.com/errata/RHSA-2026:7034","https://access.redhat.com/errata/RHSA-2026:7035","https://access.redhat.com/errata/RHSA-2026:7036","https://access.redhat.com/errata/RHSA-2026:7239","https://access.redhat.com/errata/RHSA-2026:7243","https://access.redhat.com/errata/RHSA-2026:8746","https://access.redhat.com/errata/RHSA-2026:8747","https://access.redhat.com/errata/RHSA-2026:8748","https://access.redhat.com/security/cve/CVE-2026-25646","https://bugzilla.redhat.com/show_bug.cgi?id=2438542","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25646.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-25646","description":"LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55."}]},{"artifact":{"id":"3640cf00fde88f22","cpes":["cpe:2.3:a:binutils:binutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-1181","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1181","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1181","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1181","date":"2026-10-08","epss":0.00718,"percentile":0.52406}],"risk":0.359,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1181"},"relatedVulnerabilities":[{"id":"CVE-2025-1181","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1181","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1181","date":"2026-10-08","epss":0.00718,"percentile":0.52406}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15918","https://sourceware.org/bugzilla/show_bug.cgi?id=32643","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24","https://vuldb.com/?ctiid.295084","https://vuldb.com/?id.295084","https://vuldb.com/?submit.495402","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250425-0007/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1181","description":"A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"197555b9cdbc0e71","cpes":["cpe:2.3:a:binutils-common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-common","purl":"pkg:deb/ubuntu/binutils-common@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1181","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1181","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1181","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1181","date":"2026-10-08","epss":0.00718,"percentile":0.52406}],"risk":0.359,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1181"},"relatedVulnerabilities":[{"id":"CVE-2025-1181","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1181","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1181","date":"2026-10-08","epss":0.00718,"percentile":0.52406}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15918","https://sourceware.org/bugzilla/show_bug.cgi?id=32643","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24","https://vuldb.com/?ctiid.295084","https://vuldb.com/?id.295084","https://vuldb.com/?submit.495402","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250425-0007/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1181","description":"A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"436f5c90439c5365","cpes":["cpe:2.3:a:binutils-x86-64-linux-gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux-gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/binutils-x86-64-linux-gnu@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list"}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1181","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1181","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1181","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1181","date":"2026-10-08","epss":0.00718,"percentile":0.52406}],"risk":0.359,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1181"},"relatedVulnerabilities":[{"id":"CVE-2025-1181","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1181","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1181","date":"2026-10-08","epss":0.00718,"percentile":0.52406}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15918","https://sourceware.org/bugzilla/show_bug.cgi?id=32643","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24","https://vuldb.com/?ctiid.295084","https://vuldb.com/?id.295084","https://vuldb.com/?submit.495402","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250425-0007/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1181","description":"A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"e8585c2fc66c583c","cpes":["cpe:2.3:a:libbinutils:libbinutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libbinutils","purl":"pkg:deb/ubuntu/libbinutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libbinutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1181","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1181","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1181","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1181","date":"2026-10-08","epss":0.00718,"percentile":0.52406}],"risk":0.359,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1181"},"relatedVulnerabilities":[{"id":"CVE-2025-1181","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1181","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1181","date":"2026-10-08","epss":0.00718,"percentile":0.52406}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15918","https://sourceware.org/bugzilla/show_bug.cgi?id=32643","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24","https://vuldb.com/?ctiid.295084","https://vuldb.com/?id.295084","https://vuldb.com/?submit.495402","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250425-0007/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1181","description":"A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"e9c23578b20f9960","cpes":["cpe:2.3:a:libctf-nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf-nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf-nobfd0","purl":"pkg:deb/ubuntu/libctf-nobfd0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libctf-nobfd0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf-nobfd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1181","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1181","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1181","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1181","date":"2026-10-08","epss":0.00718,"percentile":0.52406}],"risk":0.359,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1181"},"relatedVulnerabilities":[{"id":"CVE-2025-1181","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1181","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1181","date":"2026-10-08","epss":0.00718,"percentile":0.52406}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15918","https://sourceware.org/bugzilla/show_bug.cgi?id=32643","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24","https://vuldb.com/?ctiid.295084","https://vuldb.com/?id.295084","https://vuldb.com/?submit.495402","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250425-0007/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1181","description":"A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"5a72139b32f71a25","cpes":["cpe:2.3:a:libctf0:libctf0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf0","purl":"pkg:deb/ubuntu/libctf0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1181","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1181","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1181","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1181","date":"2026-10-08","epss":0.00718,"percentile":0.52406}],"risk":0.359,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1181"},"relatedVulnerabilities":[{"id":"CVE-2025-1181","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1181","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1181","date":"2026-10-08","epss":0.00718,"percentile":0.52406}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15918","https://sourceware.org/bugzilla/show_bug.cgi?id=32643","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24","https://vuldb.com/?ctiid.295084","https://vuldb.com/?id.295084","https://vuldb.com/?submit.495402","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250425-0007/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1181","description":"A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-6395","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-6395","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-6395","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-6395","date":"2026-10-08","epss":0.00717,"percentile":0.52395}],"risk":0.3585,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-6395"},"relatedVulnerabilities":[{"id":"CVE-2025-6395","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-6395","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-6395","date":"2026-10-08","epss":0.00717,"percentile":0.52395}],"urls":["https://access.redhat.com/errata/RHSA-2025:16115","https://access.redhat.com/errata/RHSA-2025:16116","https://access.redhat.com/errata/RHSA-2025:17181","https://access.redhat.com/errata/RHSA-2025:17348","https://access.redhat.com/errata/RHSA-2025:17361","https://access.redhat.com/errata/RHSA-2025:17415","https://access.redhat.com/errata/RHSA-2025:19088","https://access.redhat.com/errata/RHSA-2025:22529","https://access.redhat.com/security/cve/CVE-2025-6395","https://bugzilla.redhat.com/show_bug.cgi?id=2376755","https://gitlab.com/gnutls/gnutls/-/issues/1718","https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html","http://www.openwall.com/lists/oss-security/2025/07/11/3","https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-6395","description":"A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite()."}]},{"artifact":{"id":"42da88b6b6a23ef6","cpes":["cpe:2.3:a:libnss3:libnss3:2\\:3.49.1-1ubuntu1.9:*:*:*:*:*:*:*"],"name":"libnss3","purl":"pkg:deb/ubuntu/libnss3@2%3A3.49.1-1ubuntu1.9?arch=amd64&distro=ubuntu-20.04&upstream=nss","type":"deb","version":"2:3.49.1-1ubuntu1.9","language":"","licenses":["BSD-3","MIT","MPL-2.0","Zlib","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libnss3/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libnss3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libnss3:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libnss3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"nss"}]},"matchDetails":[{"fix":{"suggestedVersion":"2:3.98-0ubuntu0.20.04.1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-6135","versionConstraint":"< 2:3.98-0ubuntu0.20.04.1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"nss","version":"2:3.49.1-1ubuntu1.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-6135","fix":{"state":"fixed","versions":["2:3.98-0ubuntu0.20.04.1"],"available":[{"date":"2024-04-10","kind":"advisory","version":"2:3.98-0ubuntu0.20.04.1"}]},"cvss":[],"cwes":[{"cve":"CVE-2023-6135","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6135","date":"2026-10-08","epss":0.00714,"percentile":0.52226}],"risk":0.357,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-6135"},"relatedVulnerabilities":[{"id":"CVE-2023-6135","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-6135","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-6135","date":"2026-10-08","epss":0.00714,"percentile":0.52226}],"urls":["https://bugzilla.mozilla.org/show_bug.cgi?id=1853908","https://security.gentoo.org/glsa/202401-10","https://www.mozilla.org/security/advisories/mfsa2023-56/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-6135","description":"Multiple NSS NIST curves were susceptible to a side-channel attack known as \"Minerva\". This attack could potentially allow an attacker to recover the private key. This vulnerability affects Firefox < 121."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-22016","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-22016","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-22016","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-22016","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-22016","cwe":"CWE-611","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-22016","date":"2026-10-08","epss":0.00702,"percentile":0.51804}],"risk":0.35100000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-22016"},"relatedVulnerabilities":[{"id":"CVE-2026-22016","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-22016","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-22016","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-22016","cwe":"CWE-611","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-22016","date":"2026-10-08","epss":0.00702,"percentile":0.51804}],"urls":["https://www.oracle.com/security-alerts/cpuapr2026.html","https://access.redhat.com/errata/RHSA-2026:11403","https://access.redhat.com/errata/RHSA-2026:11655","https://access.redhat.com/errata/RHSA-2026:11822","https://access.redhat.com/errata/RHSA-2026:11829","https://access.redhat.com/errata/RHSA-2026:11902","https://access.redhat.com/errata/RHSA-2026:22139","https://access.redhat.com/errata/RHSA-2026:22328","https://access.redhat.com/errata/RHSA-2026:9254","https://access.redhat.com/errata/RHSA-2026:9682","https://access.redhat.com/errata/RHSA-2026:9683","https://access.redhat.com/errata/RHSA-2026:9684","https://access.redhat.com/errata/RHSA-2026:9686","https://access.redhat.com/errata/RHSA-2026:9687","https://access.redhat.com/errata/RHSA-2026:9688","https://access.redhat.com/errata/RHSA-2026:9689","https://access.redhat.com/errata/RHSA-2026:9691","https://access.redhat.com/errata/RHSA-2026:9693","https://access.redhat.com/errata/RHSA-2026:9694","https://access.redhat.com/security/cve/CVE-2026-22016","https://bugzilla.redhat.com/show_bug.cgi?id=2460039","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22016.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-22016","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-50106","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-50106","fix":{"state":"wont-fix","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2025-50106","date":"2026-10-08","epss":0.00699,"percentile":0.51669}],"risk":0.3495,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-50106"},"relatedVulnerabilities":[{"id":"CVE-2025-50106","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2025-50106","date":"2026-10-08","epss":0.00699,"percentile":0.51669}],"urls":["https://www.oracle.com/security-alerts/cpujul2025.html","https://lists.debian.org/debian-lts-announce/2025/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00014.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-50106","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."}]},{"artifact":{"id":"3640cf00fde88f22","cpes":["cpe:2.3:a:binutils:binutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-1180","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1180","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1180","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1180","date":"2026-10-08","epss":0.00698,"percentile":0.51639}],"risk":0.349,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1180"},"relatedVulnerabilities":[{"id":"CVE-2025-1180","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1180","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1180","date":"2026-10-08","epss":0.00698,"percentile":0.51639}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15917","https://sourceware.org/bugzilla/show_bug.cgi?id=32642","https://vuldb.com/?ctiid.295083","https://vuldb.com/?id.295083","https://vuldb.com/?submit.495381","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1180","description":"A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component ld. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"197555b9cdbc0e71","cpes":["cpe:2.3:a:binutils-common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-common","purl":"pkg:deb/ubuntu/binutils-common@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1180","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1180","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1180","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1180","date":"2026-10-08","epss":0.00698,"percentile":0.51639}],"risk":0.349,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1180"},"relatedVulnerabilities":[{"id":"CVE-2025-1180","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1180","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1180","date":"2026-10-08","epss":0.00698,"percentile":0.51639}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15917","https://sourceware.org/bugzilla/show_bug.cgi?id=32642","https://vuldb.com/?ctiid.295083","https://vuldb.com/?id.295083","https://vuldb.com/?submit.495381","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1180","description":"A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component ld. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"436f5c90439c5365","cpes":["cpe:2.3:a:binutils-x86-64-linux-gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux-gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/binutils-x86-64-linux-gnu@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list"}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1180","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1180","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1180","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1180","date":"2026-10-08","epss":0.00698,"percentile":0.51639}],"risk":0.349,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1180"},"relatedVulnerabilities":[{"id":"CVE-2025-1180","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1180","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1180","date":"2026-10-08","epss":0.00698,"percentile":0.51639}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15917","https://sourceware.org/bugzilla/show_bug.cgi?id=32642","https://vuldb.com/?ctiid.295083","https://vuldb.com/?id.295083","https://vuldb.com/?submit.495381","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1180","description":"A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component ld. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"e8585c2fc66c583c","cpes":["cpe:2.3:a:libbinutils:libbinutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libbinutils","purl":"pkg:deb/ubuntu/libbinutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libbinutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1180","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1180","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1180","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1180","date":"2026-10-08","epss":0.00698,"percentile":0.51639}],"risk":0.349,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1180"},"relatedVulnerabilities":[{"id":"CVE-2025-1180","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1180","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1180","date":"2026-10-08","epss":0.00698,"percentile":0.51639}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15917","https://sourceware.org/bugzilla/show_bug.cgi?id=32642","https://vuldb.com/?ctiid.295083","https://vuldb.com/?id.295083","https://vuldb.com/?submit.495381","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1180","description":"A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component ld. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"e9c23578b20f9960","cpes":["cpe:2.3:a:libctf-nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf-nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf-nobfd0","purl":"pkg:deb/ubuntu/libctf-nobfd0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libctf-nobfd0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf-nobfd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1180","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1180","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1180","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1180","date":"2026-10-08","epss":0.00698,"percentile":0.51639}],"risk":0.349,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1180"},"relatedVulnerabilities":[{"id":"CVE-2025-1180","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1180","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1180","date":"2026-10-08","epss":0.00698,"percentile":0.51639}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15917","https://sourceware.org/bugzilla/show_bug.cgi?id=32642","https://vuldb.com/?ctiid.295083","https://vuldb.com/?id.295083","https://vuldb.com/?submit.495381","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1180","description":"A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component ld. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"5a72139b32f71a25","cpes":["cpe:2.3:a:libctf0:libctf0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf0","purl":"pkg:deb/ubuntu/libctf0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1180","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1180","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1180","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1180","date":"2026-10-08","epss":0.00698,"percentile":0.51639}],"risk":0.349,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1180"},"relatedVulnerabilities":[{"id":"CVE-2025-1180","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1180","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1180","date":"2026-10-08","epss":0.00698,"percentile":0.51639}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15917","https://sourceware.org/bugzilla/show_bug.cgi?id=32642","https://vuldb.com/?ctiid.295083","https://vuldb.com/?id.295083","https://vuldb.com/?submit.495381","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1180","description":"A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component ld. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-53066","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-53066","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-53066","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-53066","date":"2026-10-08","epss":0.00694,"percentile":0.51454}],"risk":0.347,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-53066"},"relatedVulnerabilities":[{"id":"CVE-2025-53066","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-53066","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-53066","date":"2026-10-08","epss":0.00694,"percentile":0.51454}],"urls":["https://www.oracle.com/security-alerts/cpuoct2025.html","https://lists.debian.org/debian-lts-announce/2025/10/msg00026.html","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-53066","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and  21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"630ee9ffa2d2f03e","cpes":["cpe:2.3:a:springsource-spring-framework:springsource_spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource_spring_framework:springsource_spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:springsource_spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource-spring:springsource_spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource_spring:springsource_spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:pivotal_software:springsource_spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-framework:springsource_spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_framework:springsource_spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource-spring-framework:spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource_spring_framework:spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:springsource_spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource:springsource_spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-core:springsource_spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_core:springsource_spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource-spring-framework:spring-core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource-spring-framework:spring_core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource_spring_framework:spring-core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource_spring_framework:spring_core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:springsource_spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource-spring:spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource_spring:spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:vmware:springsource_spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:pivotal_software:spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-framework:spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_framework:spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring-core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource-spring:spring-core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource-spring:spring_core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource_spring:spring-core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource_spring:spring_core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource:spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:pivotal_software:spring-core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:pivotal_software:spring_core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-core:spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-framework:spring-core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-framework:spring_core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_core:spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_framework:spring-core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_framework:spring_core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource:spring-core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springsource:spring_core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-core:spring-core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-core:spring_core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_core:spring-core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_core:spring_core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:vmware:spring_framework:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:vmware:spring-core:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:vmware:spring_core:5.3.22:*:*:*:*:*:*:*"],"name":"spring-core","purl":"pkg:maven/org.springframework/spring-core@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-core-5.3.22.jar","manifestName":"","pomArtifactID":"spring-core","archiveDigests":[{"value":"661fc01832716c7eedebf995c6841b2f7117c63d","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-core-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-core-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-jmp9-x22r-554x","versionConstraint":">=5.3.0,<=5.3.44 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-core","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-jmp9-x22r-554x","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-41249","cwe":"CWE-285","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-41249","date":"2026-10-08","epss":0.00461,"percentile":0.3799}],"risk":0.34575000000000006,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-41249","https://spring.io/security/cve-2025-41249","https://github.com/spring-projects/spring-framework/issues/35342","https://github.com/spring-projects/spring-framework/commit/6d710d482a6785b069e35022e81758953afc21ff","https://github.com/spring-projects/spring-framework/releases/tag/v6.2.11"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-jmp9-x22r-554x","description":"Spring Framework annotation detection mechanism may result in improper authorization"},"relatedVulnerabilities":[{"id":"CVE-2025-41249","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-41249","cwe":"CWE-285","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-41249","date":"2026-10-08","epss":0.00461,"percentile":0.3799}],"urls":["https://spring.io/security/cve-2025-41249"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-41249","description":"The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.\n\nYour application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.\n\nYou are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.\n\nThis CVE is published in conjunction with  CVE-2025-41248 https://spring.io/security/cve-2025-41248 ."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.116"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rv64-5gf8-9qq8","versionConstraint":">=9.0.40,<9.0.116 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-rv64-5gf8-9qq8","fix":{"state":"fixed","versions":["9.0.116"],"available":[{"date":"2026-04-11","kind":"first-observed","version":"9.0.116"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34483","cwe":"CWE-116","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-34483","date":"2026-10-08","epss":0.00461,"percentile":0.3799}],"risk":0.34575000000000006,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-34483","https://lists.apache.org/thread/j1w7304yonlr8vo1tkb5nfs7od1y228b","http://www.openwall.com/lists/oss-security/2026/04/09/26"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rv64-5gf8-9qq8","description":"Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve"},"relatedVulnerabilities":[{"id":"CVE-2026-34483","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34483","cwe":"CWE-116","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-34483","date":"2026-10-08","epss":0.00461,"percentile":0.3799}],"urls":["https://lists.apache.org/thread/j1w7304yonlr8vo1tkb5nfs7od1y228b","http://www.openwall.com/lists/oss-security/2026/04/09/26"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34483","description":"Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from 10.1.0-M1 through 10.1.53, from 9.0.40 through 9.0.116.\n\nUsers are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117 , which fix the issue."}]},{"artifact":{"id":"c7d28764e839ccc7","cpes":["cpe:2.3:a:org.springframework.data.build:spring-data-commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework.data.build:spring_data_commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework.data:spring-data-commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework.data:spring_data_commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-data-commons:spring-data-commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-data-commons:spring_data_commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_data_commons:spring-data-commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_data_commons:spring_data_commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-data-commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_data_commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-data:spring-data-commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-data:spring_data_commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_data:spring-data-commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_data:spring_data_commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-data-commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_data_commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:build:spring-data-commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:build:spring_data_commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:data:spring-data-commons:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:data:spring_data_commons:2.7.2:*:*:*:*:*:*:*"],"name":"spring-data-commons","purl":"pkg:maven/org.springframework.data/spring-data-commons@2.7.2","type":"java-archive","version":"2.7.2","language":"java","licenses":["Apache-2.0"],"metadata":{"pomGroupID":"org.springframework.data","virtualPath":"/usr/lib/unifi/lib/spring-data-commons-2.7.2.jar","manifestName":"","pomArtifactID":"spring-data-commons","archiveDigests":[{"value":"9547d1234cb380234066aef60129bb2ddfdc6347","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-data-commons-2.7.2.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-data-commons-2.7.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9fw2-h3hf-293r","versionConstraint":"<=2.7.19 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework.data:spring-data-commons","version":"2.7.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-9fw2-h3hf-293r","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41716","cwe":"CWE-770","type":"Secondary","source":"security@vmware.com"}],"epss":[{"cve":"CVE-2026-41716","date":"2026-10-08","epss":0.0046,"percentile":0.37904}],"risk":0.345,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-41716","https://spring.io/security/cve-2026-41716","https://github.com/spring-projects/spring-data-commons/releases/tag/3.5.12","https://github.com/spring-projects/spring-data-commons/releases/tag/4.0.6"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9fw2-h3hf-293r","description":"Spring Data Commons: Heap exhaustion from unbounded property-lookup cache retaining crafted string keys"},"relatedVulnerabilities":[{"id":"CVE-2026-41716","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41716","cwe":"CWE-770","type":"Secondary","source":"security@vmware.com"}],"epss":[{"cve":"CVE-2026-41716","date":"2026-10-08","epss":0.0046,"percentile":0.37904}],"urls":["https://spring.io/security/cve-2026-41716"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-41716","description":"Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests.\n\nAffected versions:\nSpring Data Commons 2.7.0 through 2.7.19; 3.3.0 through 3.3.16; 3.4.0 through 3.4.14; 3.5.0 through 3.5.11; 4.0.0 through 4.0.5."}]},{"artifact":{"id":"33bfbfa0d7f4ffac","cpes":["cpe:2.3:a:org.springframework:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-webmvc:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-webmvc:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_webmvc:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_webmvc:spring_webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-webmvc:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_webmvc:5.3.22:*:*:*:*:*:*:*"],"name":"spring-webmvc","purl":"pkg:maven/org.springframework/spring-webmvc@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","manifestName":"","pomArtifactID":"spring-webmvc","archiveDigests":[{"value":"519d86b7ac9b8b6bb54739eb4eb73dc13a263b28","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-webmvc-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-x23c-287f-qqv5","versionConstraint":"<=5.3.39 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-webmvc","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-x23c-287f-qqv5","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41842","cwe":"CWE-400","type":"Secondary","source":"security@vmware.com"}],"epss":[{"cve":"CVE-2026-41842","date":"2026-10-08","epss":0.0046,"percentile":0.37894}],"risk":0.345,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-41842","https://spring.io/security/cve-2026-41842","https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19","https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-x23c-287f-qqv5","description":"Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux"},"relatedVulnerabilities":[{"id":"CVE-2026-41842","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41842","cwe":"CWE-400","type":"Secondary","source":"security@vmware.com"}],"epss":[{"cve":"CVE-2026-41842","date":"2026-10-08","epss":0.0046,"percentile":0.37894}],"urls":["https://spring.io/security/cve-2026-41842"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-41842","description":"Spring MVC and WebFlux applications are vulnerable to Denial of Service (DoS) attacks when resolving static resources.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48."}]},{"artifact":{"id":"e7531094aa31ce73","cpes":["cpe:2.3:a:org.springframework:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-expression:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-expression:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_expression:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_expression:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_expression:5.3.22:*:*:*:*:*:*:*"],"name":"spring-expression","purl":"pkg:maven/org.springframework/spring-expression@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","manifestName":"","pomArtifactID":"spring-expression","archiveDigests":[{"value":"c056f9e9994b18c95deead695f9471952d1f21d1","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-775g-4xr8-78h8","versionConstraint":"<=5.3.39 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-expression","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-775g-4xr8-78h8","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41849","cwe":"CWE-190","type":"Secondary","source":"security@vmware.com"}],"epss":[{"cve":"CVE-2026-41849","date":"2026-10-08","epss":0.0046,"percentile":0.3787}],"risk":0.345,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-41849","https://spring.io/security/cve-2026-41849"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-775g-4xr8-78h8","description":"Spring Framework Denial of Service via Integer Overflow in SpEL Expressions"},"relatedVulnerabilities":[{"id":"CVE-2026-41849","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41849","cwe":"CWE-190","type":"Secondary","source":"security@vmware.com"}],"epss":[{"cve":"CVE-2026-41849","date":"2026-10-08","epss":0.0046,"percentile":0.3787}],"urls":["https://spring.io/security/cve-2026-41849"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-41849","description":"An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL). An attacker can exploit this by supplying a specially crafted SpEL expression that triggers excessive resource consumption, resulting in a Denial of Service (DoS).\n\nAffected versions:\nSpring Framework 5.3.0 through 5.3.48."}]},{"artifact":{"id":"e7531094aa31ce73","cpes":["cpe:2.3:a:org.springframework:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-expression:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-expression:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_expression:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_expression:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_expression:5.3.22:*:*:*:*:*:*:*"],"name":"spring-expression","purl":"pkg:maven/org.springframework/spring-expression@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","manifestName":"","pomArtifactID":"spring-expression","archiveDigests":[{"value":"c056f9e9994b18c95deead695f9471952d1f21d1","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-r5w3-xv2f-j59q","versionConstraint":"<=5.3.39 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-expression","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-r5w3-xv2f-j59q","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41850","cwe":"CWE-407","type":"Secondary","source":"security@vmware.com"}],"epss":[{"cve":"CVE-2026-41850","date":"2026-10-08","epss":0.0046,"percentile":0.3787}],"risk":0.345,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-41850","https://spring.io/security/cve-2026-41850","https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19","https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-r5w3-xv2f-j59q","description":"Spring Framework Algorithmic Denial of Service via SpEL Expressions"},"relatedVulnerabilities":[{"id":"CVE-2026-41850","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41850","cwe":"CWE-407","type":"Secondary","source":"security@vmware.com"}],"epss":[{"cve":"CVE-2026-41850","date":"2026-10-08","epss":0.0046,"percentile":0.3787}],"urls":["https://spring.io/security/cve-2026-41850"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-41850","description":"Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS). By providing a specially crafted expression, an attacker can trigger excessive resource consumption during evaluation, leading to application degradation or unavailability.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.13+11-2ubuntu1~20.04"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-21217","versionConstraint":"< 17.0.13+11-2ubuntu1~20.04 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-21217","fix":{"state":"fixed","versions":["17.0.13+11-2ubuntu1~20.04"],"available":[{"date":"2024-11-11","kind":"advisory","version":"17.0.13+11-2ubuntu1~20.04"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-21217","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21217","date":"2026-10-08","epss":0.01149,"percentile":0.659}],"risk":0.3447,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-21217"},"relatedVulnerabilities":[{"id":"CVE-2024-21217","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21217","cwe":"CWE-502","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21217","date":"2026-10-08","epss":0.01149,"percentile":0.659}],"urls":["https://www.oracle.com/security-alerts/cpuoct2024.html","https://lists.debian.org/debian-lts-announce/2024/10/msg00018.html","https://lists.debian.org/debian-lts-announce/2024/10/msg00020.html","https://openjdk.org/groups/vulnerability/advisories/2024-10-15"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21217","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"02a2cda4e2596879","cpes":["cpe:2.3:a:curl:curl:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-11856","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-11856","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-11856","date":"2026-10-08","epss":0.00688,"percentile":0.51225}],"risk":0.344,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-11856"},"relatedVulnerabilities":[{"id":"CVE-2026-11856","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-11856","date":"2026-10-08","epss":0.00688,"percentile":0.51225}],"urls":["https://curl.se/docs/CVE-2026-11856.html","https://curl.se/docs/CVE-2026-11856.json","https://hackerone.com/reports/3793260"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11856","description":"Successfully using libcurl to do a transfer to a specific HTTP origin\n(`hostA`) with **Digest** authentication and then changing the origin to a\ndifferent one (`hostB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Authorization:` header field meant for `hostA`,\nto `hostB`."}]},{"artifact":{"id":"5bfe812075df9ecc","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04&upstream=curl","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-11856","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-11856","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-11856","date":"2026-10-08","epss":0.00688,"percentile":0.51225}],"risk":0.344,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-11856"},"relatedVulnerabilities":[{"id":"CVE-2026-11856","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-11856","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-11856","date":"2026-10-08","epss":0.00688,"percentile":0.51225}],"urls":["https://curl.se/docs/CVE-2026-11856.html","https://curl.se/docs/CVE-2026-11856.json","https://hackerone.com/reports/3793260"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11856","description":"Successfully using libcurl to do a transfer to a specific HTTP origin\n(`hostA`) with **Digest** authentication and then changing the origin to a\ndifferent one (`hostB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Authorization:` header field meant for `hostA`,\nto `hostB`."}]},{"artifact":{"id":"3640cf00fde88f22","cpes":["cpe:2.3:a:binutils:binutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-1176","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1176","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1176","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1176","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1176","date":"2026-10-08","epss":0.00678,"percentile":0.50839}],"risk":0.33899999999999997,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1176"},"relatedVulnerabilities":[{"id":"CVE-2025-1176","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1176","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1176","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1176","date":"2026-10-08","epss":0.00678,"percentile":0.50839}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15913","https://sourceware.org/bugzilla/show_bug.cgi?id=32636","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f9978defb6fab0bd8583942d97c112b0932ac814","https://vuldb.com/?ctiid.295079","https://vuldb.com/?id.295079","https://vuldb.com/?submit.495329","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250411-0007/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1176","description":"A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The patch is named f9978defb6fab0bd8583942d97c112b0932ac814. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"197555b9cdbc0e71","cpes":["cpe:2.3:a:binutils-common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-common","purl":"pkg:deb/ubuntu/binutils-common@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1176","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1176","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1176","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1176","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1176","date":"2026-10-08","epss":0.00678,"percentile":0.50839}],"risk":0.33899999999999997,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1176"},"relatedVulnerabilities":[{"id":"CVE-2025-1176","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1176","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1176","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1176","date":"2026-10-08","epss":0.00678,"percentile":0.50839}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15913","https://sourceware.org/bugzilla/show_bug.cgi?id=32636","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f9978defb6fab0bd8583942d97c112b0932ac814","https://vuldb.com/?ctiid.295079","https://vuldb.com/?id.295079","https://vuldb.com/?submit.495329","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250411-0007/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1176","description":"A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The patch is named f9978defb6fab0bd8583942d97c112b0932ac814. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"436f5c90439c5365","cpes":["cpe:2.3:a:binutils-x86-64-linux-gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux-gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/binutils-x86-64-linux-gnu@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list"}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1176","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1176","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1176","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1176","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1176","date":"2026-10-08","epss":0.00678,"percentile":0.50839}],"risk":0.33899999999999997,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1176"},"relatedVulnerabilities":[{"id":"CVE-2025-1176","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1176","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1176","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1176","date":"2026-10-08","epss":0.00678,"percentile":0.50839}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15913","https://sourceware.org/bugzilla/show_bug.cgi?id=32636","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f9978defb6fab0bd8583942d97c112b0932ac814","https://vuldb.com/?ctiid.295079","https://vuldb.com/?id.295079","https://vuldb.com/?submit.495329","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250411-0007/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1176","description":"A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The patch is named f9978defb6fab0bd8583942d97c112b0932ac814. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"e8585c2fc66c583c","cpes":["cpe:2.3:a:libbinutils:libbinutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libbinutils","purl":"pkg:deb/ubuntu/libbinutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libbinutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1176","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1176","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1176","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1176","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1176","date":"2026-10-08","epss":0.00678,"percentile":0.50839}],"risk":0.33899999999999997,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1176"},"relatedVulnerabilities":[{"id":"CVE-2025-1176","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1176","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1176","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1176","date":"2026-10-08","epss":0.00678,"percentile":0.50839}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15913","https://sourceware.org/bugzilla/show_bug.cgi?id=32636","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f9978defb6fab0bd8583942d97c112b0932ac814","https://vuldb.com/?ctiid.295079","https://vuldb.com/?id.295079","https://vuldb.com/?submit.495329","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250411-0007/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1176","description":"A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The patch is named f9978defb6fab0bd8583942d97c112b0932ac814. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"e9c23578b20f9960","cpes":["cpe:2.3:a:libctf-nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf-nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf-nobfd0","purl":"pkg:deb/ubuntu/libctf-nobfd0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libctf-nobfd0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf-nobfd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1176","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1176","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1176","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1176","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1176","date":"2026-10-08","epss":0.00678,"percentile":0.50839}],"risk":0.33899999999999997,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1176"},"relatedVulnerabilities":[{"id":"CVE-2025-1176","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1176","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1176","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1176","date":"2026-10-08","epss":0.00678,"percentile":0.50839}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15913","https://sourceware.org/bugzilla/show_bug.cgi?id=32636","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f9978defb6fab0bd8583942d97c112b0932ac814","https://vuldb.com/?ctiid.295079","https://vuldb.com/?id.295079","https://vuldb.com/?submit.495329","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250411-0007/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1176","description":"A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The patch is named f9978defb6fab0bd8583942d97c112b0932ac814. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"5a72139b32f71a25","cpes":["cpe:2.3:a:libctf0:libctf0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf0","purl":"pkg:deb/ubuntu/libctf0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1176","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1176","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1176","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1176","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1176","date":"2026-10-08","epss":0.00678,"percentile":0.50839}],"risk":0.33899999999999997,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1176"},"relatedVulnerabilities":[{"id":"CVE-2025-1176","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1176","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1176","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1176","date":"2026-10-08","epss":0.00678,"percentile":0.50839}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15913","https://sourceware.org/bugzilla/show_bug.cgi?id=32636","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f9978defb6fab0bd8583942d97c112b0932ac814","https://vuldb.com/?ctiid.295079","https://vuldb.com/?id.295079","https://vuldb.com/?submit.495329","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250411-0007/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1176","description":"A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The patch is named f9978defb6fab0bd8583942d97c112b0932ac814. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"c1afe861706c7168","cpes":["cpe:2.3:a:krb5-locales:krb5-locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5-locales:krb5_locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5_locales:krb5-locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5_locales:krb5_locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_locales:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"krb5-locales","purl":"pkg:deb/ubuntu/krb5-locales@1.17-6ubuntu4.4?arch=all&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/krb5-locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/krb5-locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/krb5-locales.list"}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-26461","versionConstraint":"< 1.17-6ubuntu4.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-26461","fix":{"state":"fixed","versions":["1.17-6ubuntu4.9"],"available":[{"date":"2025-03-03","kind":"advisory","version":"1.17-6ubuntu4.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-08","epss":0.01128,"percentile":0.65338}],"risk":0.3384,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-26461"},"relatedVulnerabilities":[{"id":"CVE-2024-26461","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-08","epss":0.01128,"percentile":0.65338}],"urls":["https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md","https://security.netapp.com/advisory/ntap-20240415-0011/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-26461","description":"Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c."}]},{"artifact":{"id":"b88197ff1a531432","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/ubuntu/libgssapi-krb5-2@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-26461","versionConstraint":"< 1.17-6ubuntu4.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-26461","fix":{"state":"fixed","versions":["1.17-6ubuntu4.9"],"available":[{"date":"2025-03-03","kind":"advisory","version":"1.17-6ubuntu4.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-08","epss":0.01128,"percentile":0.65338}],"risk":0.3384,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-26461"},"relatedVulnerabilities":[{"id":"CVE-2024-26461","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-08","epss":0.01128,"percentile":0.65338}],"urls":["https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md","https://security.netapp.com/advisory/ntap-20240415-0011/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-26461","description":"Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c."}]},{"artifact":{"id":"205c4946e1a25685","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/ubuntu/libk5crypto3@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-26461","versionConstraint":"< 1.17-6ubuntu4.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-26461","fix":{"state":"fixed","versions":["1.17-6ubuntu4.9"],"available":[{"date":"2025-03-03","kind":"advisory","version":"1.17-6ubuntu4.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-08","epss":0.01128,"percentile":0.65338}],"risk":0.3384,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-26461"},"relatedVulnerabilities":[{"id":"CVE-2024-26461","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-08","epss":0.01128,"percentile":0.65338}],"urls":["https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md","https://security.netapp.com/advisory/ntap-20240415-0011/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-26461","description":"Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c."}]},{"artifact":{"id":"6a71efc1099a31f1","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.17-6ubuntu4.4:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/ubuntu/libkrb5-3@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-26461","versionConstraint":"< 1.17-6ubuntu4.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-26461","fix":{"state":"fixed","versions":["1.17-6ubuntu4.9"],"available":[{"date":"2025-03-03","kind":"advisory","version":"1.17-6ubuntu4.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-08","epss":0.01128,"percentile":0.65338}],"risk":0.3384,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-26461"},"relatedVulnerabilities":[{"id":"CVE-2024-26461","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-08","epss":0.01128,"percentile":0.65338}],"urls":["https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md","https://security.netapp.com/advisory/ntap-20240415-0011/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-26461","description":"Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c."}]},{"artifact":{"id":"08cd2db1dbbc7a60","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.17-6ubuntu4.4:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/ubuntu/libkrb5support0@1.17-6ubuntu4.4?arch=amd64&distro=ubuntu-20.04&upstream=krb5","type":"deb","version":"1.17-6ubuntu4.4","language":"","licenses":["sha256:4a2d321ab57260e8de4b67bde8cff76c07d28be69c2d8b22dfc2bfa42f5c41b9"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"fix":{"suggestedVersion":"1.17-6ubuntu4.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-26461","versionConstraint":"< 1.17-6ubuntu4.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"krb5","version":"1.17-6ubuntu4.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-26461","fix":{"state":"fixed","versions":["1.17-6ubuntu4.9"],"available":[{"date":"2025-03-03","kind":"advisory","version":"1.17-6ubuntu4.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-08","epss":0.01128,"percentile":0.65338}],"risk":0.3384,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-26461"},"relatedVulnerabilities":[{"id":"CVE-2024-26461","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-26461","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-26461","date":"2026-10-08","epss":0.01128,"percentile":0.65338}],"urls":["https://github.com/LuMingYinDetect/krb5_defects/blob/main/krb5_detect_2.md","https://security.netapp.com/advisory/ntap-20240415-0011/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-26461","description":"Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c."}]},{"artifact":{"id":"e17b266d1d27c88b","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3","type":"java-archive","version":"2.13.3","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"56deb9ea2c93a7a556b3afbedd616d342963464e","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.18.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cxp5-3px4-pw24","versionConstraint":">=2.5.0,<=2.18.10 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.13.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-cxp5-3px4-pw24","fix":{"state":"fixed","versions":["2.18.11"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.18.11"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91777","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91777","date":"2026-10-08","epss":0.0045,"percentile":0.3713}],"risk":0.33749999999999997,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind/pull/6204","https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cxp5-3px4-pw24","description":"jackson-databind quadratic forward-reference completion"},"relatedVulnerabilities":[{"id":"CVE-2026-91777","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91777","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91777","date":"2026-10-08","epss":0.0045,"percentile":0.3713}],"urls":["https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91777","description":"Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference() and the equivalent implementation in MapDeserializer. When a document first creates N unresolved object-ID references in an identity-enabled collection or map and then defines those same IDs in reverse order, completion performs on the order of N * (N + 1) / 2 identity comparisons, so a shallow document whose size grows linearly causes quadratic CPU work during deserialization. The reporter instrumented equals() calls on the ID class and measured exactly 2,003,000 comparisons at N = 2,000, against zero comparisons in the pending-reference lookup path for an equally sized control in which every reference was already resolved. The input requires no deep nesting and no syntactically unusual JSON. Exploitation requires an application that deserializes attacker-influenced JSON into an identity-enabled collection or map. The fix replaces the repeated linear lookup with a keyed pending-reference structure."}]},{"artifact":{"id":"e17b266d1d27c88b","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3","type":"java-archive","version":"2.13.3","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"56deb9ea2c93a7a556b3afbedd616d342963464e","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.18.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wv8q-qhhj-9h54","versionConstraint":">=2.0.0,<=2.18.10 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.13.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wv8q-qhhj-9h54","fix":{"state":"fixed","versions":["2.18.11"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.18.11"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91776","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91776","date":"2026-10-08","epss":0.0045,"percentile":0.3713}],"risk":0.33749999999999997,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wv8q-qhhj-9h54","description":"jackson-databind retains every unknown raw type ID"},"relatedVulnerabilities":[{"id":"CVE-2026-91776","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91776","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91776","date":"2026-10-08","epss":0.0045,"percentile":0.3713}],"urls":["https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91776","description":"TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfo(use = Id.NAME, defaultImpl = ...), every distinct unrecognized type ID resolves to the same fallback deserializer but is retained as its own key in the _deserializers map. That map has no configurable bound and lives for the lifetime of the type deserializer, so an attacker who can repeatedly supply fresh unknown type IDs causes monotonic memory retention across requests. The reporter observed 10,000 retained entries from 10,000 distinct unknown IDs, against a single entry for a control that repeated one unknown ID the same number of times, isolating attacker-controlled key cardinality from request volume. Exploitation requires an application that enables name-based polymorphism with a defaultImpl or equivalent fallback, accepts attacker-influenced type IDs, and reuses a long-lived ObjectMapper across requests. The fix stops caching fallback resolutions for unrecognized IDs and bounds both the number of cached entries and the length of a cacheable type ID."}]},{"artifact":{"id":"68b2eaee91f56791","cpes":["cpe:2.3:a:libpcre2-8-0:libpcre2-8-0:10.34-7ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2-8-0:libpcre2_8_0:10.34-7ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2_8_0:libpcre2-8-0:10.34-7ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2_8_0:libpcre2_8_0:10.34-7ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2-8:libpcre2-8-0:10.34-7ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2-8:libpcre2_8_0:10.34-7ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2_8:libpcre2-8-0:10.34-7ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2_8:libpcre2_8_0:10.34-7ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2:libpcre2-8-0:10.34-7ubuntu0.1:*:*:*:*:*:*:*","cpe:2.3:a:libpcre2:libpcre2_8_0:10.34-7ubuntu0.1:*:*:*:*:*:*:*"],"name":"libpcre2-8-0","purl":"pkg:deb/ubuntu/libpcre2-8-0@10.34-7ubuntu0.1?arch=amd64&distro=ubuntu-20.04&upstream=pcre2","type":"deb","version":"10.34-7ubuntu0.1","language":"","licenses":["sha256:f65dae37239e4d61a1bdeaf2ded76b8569d012a054aa042233b78615e7a83210"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpcre2-8-0/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libpcre2-8-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpcre2-8-0:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libpcre2-8-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"pcre2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-41409","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"pcre2","version":"10.34-7ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2022-41409","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2022-41409","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41409","date":"2026-10-08","epss":0.01121,"percentile":0.65174}],"risk":0.3363,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-41409"},"relatedVulnerabilities":[{"id":"CVE-2022-41409","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-41409","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-41409","date":"2026-10-08","epss":0.01121,"percentile":0.65174}],"urls":["https://github.com/PCRE2Project/pcre2/commit/94e1c001761373b7d9450768aa15d04c25547a35","https://github.com/PCRE2Project/pcre2/issues/141"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-41409","description":"Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.117"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-x4m4-345f-5h5g","versionConstraint":">=9.0.13,<9.0.117 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-x4m4-345f-5h5g","fix":{"state":"fixed","versions":["9.0.117"],"available":[{"date":"2026-04-11","kind":"first-observed","version":"9.0.117"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34487","cwe":"CWE-532","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-34487","date":"2026-10-08","epss":0.00447,"percentile":0.36877}],"risk":0.33525,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-34487","https://lists.apache.org/thread/4xpkwolpkrj8v5xzp5nyovtlqp3y850h","http://www.openwall.com/lists/oss-security/2026/04/09/28","https://github.com/apache/tomcat/commit/301bc6efbf72feb14dacfdfa3f50372182736150","https://github.com/apache/tomcat/commit/5eff2a773b8b728083e5195b3183df1b9e12a03d","https://github.com/apache/tomcat/commit/f593292a082e5ef9336a8db2b4b522f7f3e36976","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-x4m4-345f-5h5g","description":"Apache Tomcat vulnerable to Insertion of Sensitive Information into Log File"},"relatedVulnerabilities":[{"id":"CVE-2026-34487","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-34487","cwe":"CWE-532","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-34487","date":"2026-10-08","epss":0.00447,"percentile":0.36877}],"urls":["https://lists.apache.org/thread/4xpkwolpkrj8v5xzp5nyovtlqp3y850h","http://www.openwall.com/lists/oss-security/2026/04/09/28"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-34487","description":"Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.20, from 10.1.0-M1 through 10.1.53, from 9.0.13 through 9.0.116.\n\nUsers are recommended to upgrade to version 11.0.21, 10.1.54 or 9.0.117, which fix the issue."}]},{"artifact":{"id":"3640cf00fde88f22","cpes":["cpe:2.3:a:binutils:binutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-1010204","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010204","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010204","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-1010204","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010204","date":"2026-10-08","epss":0.01115,"percentile":0.65031}],"risk":0.33449999999999996,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010204"},"relatedVulnerabilities":[{"id":"CVE-2019-1010204","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010204","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-1010204","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010204","date":"2026-10-08","epss":0.01115,"percentile":0.65031}],"urls":["https://security.netapp.com/advisory/ntap-20190822-0001/","https://sourceware.org/bugzilla/show_bug.cgi?id=23765","https://support.f5.com/csp/article/K05032915?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010204","description":"GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened."}]},{"artifact":{"id":"197555b9cdbc0e71","cpes":["cpe:2.3:a:binutils-common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-common","purl":"pkg:deb/ubuntu/binutils-common@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010204","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010204","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010204","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-1010204","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010204","date":"2026-10-08","epss":0.01115,"percentile":0.65031}],"risk":0.33449999999999996,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010204"},"relatedVulnerabilities":[{"id":"CVE-2019-1010204","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010204","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-1010204","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010204","date":"2026-10-08","epss":0.01115,"percentile":0.65031}],"urls":["https://security.netapp.com/advisory/ntap-20190822-0001/","https://sourceware.org/bugzilla/show_bug.cgi?id=23765","https://support.f5.com/csp/article/K05032915?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010204","description":"GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened."}]},{"artifact":{"id":"436f5c90439c5365","cpes":["cpe:2.3:a:binutils-x86-64-linux-gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux-gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/binutils-x86-64-linux-gnu@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list"}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010204","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010204","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010204","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-1010204","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010204","date":"2026-10-08","epss":0.01115,"percentile":0.65031}],"risk":0.33449999999999996,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010204"},"relatedVulnerabilities":[{"id":"CVE-2019-1010204","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010204","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-1010204","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010204","date":"2026-10-08","epss":0.01115,"percentile":0.65031}],"urls":["https://security.netapp.com/advisory/ntap-20190822-0001/","https://sourceware.org/bugzilla/show_bug.cgi?id=23765","https://support.f5.com/csp/article/K05032915?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010204","description":"GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened."}]},{"artifact":{"id":"e8585c2fc66c583c","cpes":["cpe:2.3:a:libbinutils:libbinutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libbinutils","purl":"pkg:deb/ubuntu/libbinutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libbinutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010204","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010204","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010204","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-1010204","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010204","date":"2026-10-08","epss":0.01115,"percentile":0.65031}],"risk":0.33449999999999996,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010204"},"relatedVulnerabilities":[{"id":"CVE-2019-1010204","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010204","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-1010204","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010204","date":"2026-10-08","epss":0.01115,"percentile":0.65031}],"urls":["https://security.netapp.com/advisory/ntap-20190822-0001/","https://sourceware.org/bugzilla/show_bug.cgi?id=23765","https://support.f5.com/csp/article/K05032915?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010204","description":"GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened."}]},{"artifact":{"id":"e9c23578b20f9960","cpes":["cpe:2.3:a:libctf-nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf-nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf-nobfd0","purl":"pkg:deb/ubuntu/libctf-nobfd0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libctf-nobfd0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf-nobfd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010204","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010204","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010204","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-1010204","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010204","date":"2026-10-08","epss":0.01115,"percentile":0.65031}],"risk":0.33449999999999996,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010204"},"relatedVulnerabilities":[{"id":"CVE-2019-1010204","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010204","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-1010204","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010204","date":"2026-10-08","epss":0.01115,"percentile":0.65031}],"urls":["https://security.netapp.com/advisory/ntap-20190822-0001/","https://sourceware.org/bugzilla/show_bug.cgi?id=23765","https://support.f5.com/csp/article/K05032915?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010204","description":"GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened."}]},{"artifact":{"id":"5a72139b32f71a25","cpes":["cpe:2.3:a:libctf0:libctf0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf0","purl":"pkg:deb/ubuntu/libctf0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010204","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2019-1010204","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010204","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-1010204","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010204","date":"2026-10-08","epss":0.01115,"percentile":0.65031}],"risk":0.33449999999999996,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2019-1010204"},"relatedVulnerabilities":[{"id":"CVE-2019-1010204","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010204","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-1010204","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010204","date":"2026-10-08","epss":0.01115,"percentile":0.65031}],"urls":["https://security.netapp.com/advisory/ntap-20190822-0001/","https://sourceware.org/bugzilla/show_bug.cgi?id=23765","https://support.f5.com/csp/article/K05032915?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010204","description":"GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened."}]},{"artifact":{"id":"ff982be65dc32dfc","cpes":["cpe:2.3:a:libgcrypt20:libgcrypt20:1.8.5-5ubuntu1.1:*:*:*:*:*:*:*"],"name":"libgcrypt20","purl":"pkg:deb/ubuntu/libgcrypt20@1.8.5-5ubuntu1.1?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.8.5-5ubuntu1.1","language":"","licenses":["sha256:8f11910ef604ead72fbdc0c0caa641e3f955f66c4868175310ed7290e32b0f37"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgcrypt20/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgcrypt20/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgcrypt20:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgcrypt20:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-2236","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"libgcrypt20","version":"1.8.5-5ubuntu1.1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-2236","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2024-2236","cwe":"CWE-385","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-2236","date":"2026-10-08","epss":0.01114,"percentile":0.65005}],"risk":0.3342,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-2236"},"relatedVulnerabilities":[{"id":"CVE-2024-2236","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2236","cwe":"CWE-385","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2024-2236","date":"2026-10-08","epss":0.01114,"percentile":0.65005}],"urls":["https://access.redhat.com/errata/RHSA-2024:9404","https://access.redhat.com/errata/RHSA-2025:3530","https://access.redhat.com/errata/RHSA-2025:3534","https://access.redhat.com/security/cve/CVE-2024-2236","https://bugzilla.redhat.com/show_bug.cgi?id=2245218","https://bugzilla.redhat.com/show_bug.cgi?id=2268268"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2236","description":"A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-14831","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-14831","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-14831","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-14831","date":"2026-10-08","epss":0.00666,"percentile":0.50289}],"risk":0.333,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-14831"},"relatedVulnerabilities":[{"id":"CVE-2025-14831","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-14831","cwe":"CWE-407","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-14831","date":"2026-10-08","epss":0.00666,"percentile":0.50289}],"urls":["https://access.redhat.com/errata/RHSA-2026:13812","https://access.redhat.com/errata/RHSA-2026:16008","https://access.redhat.com/errata/RHSA-2026:16009","https://access.redhat.com/errata/RHSA-2026:16174","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:3477","https://access.redhat.com/errata/RHSA-2026:4188","https://access.redhat.com/errata/RHSA-2026:4655","https://access.redhat.com/errata/RHSA-2026:4943","https://access.redhat.com/errata/RHSA-2026:5585","https://access.redhat.com/errata/RHSA-2026:5606","https://access.redhat.com/errata/RHSA-2026:6618","https://access.redhat.com/errata/RHSA-2026:6630","https://access.redhat.com/errata/RHSA-2026:6737","https://access.redhat.com/errata/RHSA-2026:6738","https://access.redhat.com/errata/RHSA-2026:7329","https://access.redhat.com/errata/RHSA-2026:7335","https://access.redhat.com/errata/RHSA-2026:7477","https://access.redhat.com/errata/RHSA-2026:8746","https://access.redhat.com/errata/RHSA-2026:8747","https://access.redhat.com/errata/RHSA-2026:8748","https://access.redhat.com/security/cve/CVE-2025-14831","https://bugzilla.redhat.com/show_bug.cgi?id=2423177","https://gitlab.com/gnutls/gnutls/-/issues/1773","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-14831","description":"A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs)."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42766","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-42766","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-42766","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42766","date":"2026-10-08","epss":0.0111,"percentile":0.64898}],"risk":0.333,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42766"},"relatedVulnerabilities":[{"id":"CVE-2026-42766","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42766","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42766","date":"2026-10-08","epss":0.0111,"percentile":0.64898}],"urls":["https://github.com/openssl/openssl/commit/056d06c1918fafbb98c1c85a02e4c47cc4e199ce","https://github.com/openssl/openssl/commit/12bc26ffb3a2be728c9b86e1cae277de5b33dfa4","https://github.com/openssl/openssl/commit/3ff64913615d648cfbb6a6f1cf5529ae7ea829d7","https://github.com/openssl/openssl/commit/ab52d88cb5374876d59aee3c91f9e4ccce2b7ce4","https://github.com/openssl/openssl/commit/da26f368732b83e40e9d356fe61c3d3aaab6d2e8","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42766","description":"Issue summary: A specially crafted password-encrypted CMS message\ncan trigger a NULL pointer dereference during CMS decryption.\n\nImpact summary: This NULL pointer dereference leads to an application crash\nand a Denial of Service.\n\nThe CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as\nOPTIONAL in the ASN.1 specification and may therefore be absent in specially\ncrafted inputs. During the password-based CMS decryption the OpenSSL\nCMS implementation dereferences this field without first checking whether it\nwas present.\n\nAn attacker who supplies such a CMS message to an application performing\npassword-based CMS decryption can trigger an application crash, leading to\na Denial of Service.\n\nApplications that process password-encrypted CMS messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-42766","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-42766","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-42766","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42766","date":"2026-10-08","epss":0.0111,"percentile":0.64898}],"risk":0.333,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42766"},"relatedVulnerabilities":[{"id":"CVE-2026-42766","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42766","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42766","date":"2026-10-08","epss":0.0111,"percentile":0.64898}],"urls":["https://github.com/openssl/openssl/commit/056d06c1918fafbb98c1c85a02e4c47cc4e199ce","https://github.com/openssl/openssl/commit/12bc26ffb3a2be728c9b86e1cae277de5b33dfa4","https://github.com/openssl/openssl/commit/3ff64913615d648cfbb6a6f1cf5529ae7ea829d7","https://github.com/openssl/openssl/commit/ab52d88cb5374876d59aee3c91f9e4ccce2b7ce4","https://github.com/openssl/openssl/commit/da26f368732b83e40e9d356fe61c3d3aaab6d2e8","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42766","description":"Issue summary: A specially crafted password-encrypted CMS message\ncan trigger a NULL pointer dereference during CMS decryption.\n\nImpact summary: This NULL pointer dereference leads to an application crash\nand a Denial of Service.\n\nThe CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as\nOPTIONAL in the ASN.1 specification and may therefore be absent in specially\ncrafted inputs. During the password-based CMS decryption the OpenSSL\nCMS implementation dereferences this field without first checking whether it\nwas present.\n\nAn attacker who supplies such a CMS message to an application performing\npassword-based CMS decryption can trigger an application crash, leading to\na Denial of Service.\n\nApplications that process password-encrypted CMS messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-7921","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2020-7921","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-7921","cwe":"CWE-182","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7921","cwe":"CWE-863","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7921","date":"2026-10-08","epss":0.00665,"percentile":0.50249}],"risk":0.33249999999999996,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2020-7921"},"relatedVulnerabilities":[{"id":"CVE-2020-7921","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","metrics":{"baseScore":3.5,"impactScore":2.9,"exploitabilityScore":6.9},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.6,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7921","cwe":"CWE-182","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7921","cwe":"CWE-863","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7921","date":"2026-10-08","epss":0.00665,"percentile":0.50249}],"urls":["https://jira.mongodb.org/browse/SERVER-45472"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7921","description":"Improper serialization of internal state in the authorization subsystem in MongoDB Server's authorization subsystem permits a user with valid credentials to bypass IP whitelisting protection mechanisms following administrative action. This issue affects MongoDB Server v4.2 versions prior to 4.2.3; MongoDB Server v4.0 versions prior to 4.0.15; MongoDB Server v4.3 versions prior to 4.3.3and MongoDB Server v3.6 versions prior to 3.6.18."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-7921","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2020-7921","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-7921","cwe":"CWE-182","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7921","cwe":"CWE-863","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7921","date":"2026-10-08","epss":0.00665,"percentile":0.50249}],"risk":0.33249999999999996,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2020-7921"},"relatedVulnerabilities":[{"id":"CVE-2020-7921","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","metrics":{"baseScore":3.5,"impactScore":2.9,"exploitabilityScore":6.9},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.6,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7921","cwe":"CWE-182","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7921","cwe":"CWE-863","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7921","date":"2026-10-08","epss":0.00665,"percentile":0.50249}],"urls":["https://jira.mongodb.org/browse/SERVER-45472"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7921","description":"Improper serialization of internal state in the authorization subsystem in MongoDB Server's authorization subsystem permits a user with valid credentials to bypass IP whitelisting protection mechanisms following administrative action. This issue affects MongoDB Server v4.2 versions prior to 4.2.3; MongoDB Server v4.0 versions prior to 4.0.15; MongoDB Server v4.3 versions prior to 4.3.3and MongoDB Server v3.6 versions prior to 3.6.18."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-7921","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2020-7921","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-7921","cwe":"CWE-182","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7921","cwe":"CWE-863","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7921","date":"2026-10-08","epss":0.00665,"percentile":0.50249}],"risk":0.33249999999999996,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2020-7921"},"relatedVulnerabilities":[{"id":"CVE-2020-7921","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","metrics":{"baseScore":3.5,"impactScore":2.9,"exploitabilityScore":6.9},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.6,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7921","cwe":"CWE-182","type":"Secondary","source":"cna@mongodb.com"},{"cve":"CVE-2020-7921","cwe":"CWE-863","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-7921","date":"2026-10-08","epss":0.00665,"percentile":0.50249}],"urls":["https://jira.mongodb.org/browse/SERVER-45472"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7921","description":"Improper serialization of internal state in the authorization subsystem in MongoDB Server's authorization subsystem permits a user with valid credentials to bypass IP whitelisting protection mechanisms following administrative action. This issue affects MongoDB Server v4.2 versions prior to 4.2.3; MongoDB Server v4.0 versions prior to 4.0.15; MongoDB Server v4.3 versions prior to 4.3.3and MongoDB Server v3.6 versions prior to 3.6.18."}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4046","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-4046","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-08","epss":0.00662,"percentile":0.50136}],"risk":0.331,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-4046"},"relatedVulnerabilities":[{"id":"CVE-2026-4046","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-08","epss":0.00662,"percentile":0.50136}],"urls":["https://inbox.sourceware.org/libc-announce/76814edf-cf7f-47ec-979d-2dce0a2c76bf@gotplt.org/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=33980","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4046","description":"The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application.\n\n\n\nThis vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4046","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-4046","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-08","epss":0.00662,"percentile":0.50136}],"risk":0.331,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-4046"},"relatedVulnerabilities":[{"id":"CVE-2026-4046","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-08","epss":0.00662,"percentile":0.50136}],"urls":["https://inbox.sourceware.org/libc-announce/76814edf-cf7f-47ec-979d-2dce0a2c76bf@gotplt.org/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=33980","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4046","description":"The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application.\n\n\n\nThis vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them."}]},{"artifact":{"id":"b082b70df3e54e06","cpes":["cpe:2.3:a:locales:locales:2.31-0ubuntu9.14:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.31-0ubuntu9.14?arch=all&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.14","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4046","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.14"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-4046","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-08","epss":0.00662,"percentile":0.50136}],"risk":0.331,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-4046"},"relatedVulnerabilities":[{"id":"CVE-2026-4046","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4046","cwe":"CWE-617","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-4046","date":"2026-10-08","epss":0.00662,"percentile":0.50136}],"urls":["https://inbox.sourceware.org/libc-announce/76814edf-cf7f-47ec-979d-2dce0a2c76bf@gotplt.org/T/#u","https://sourceware.org/bugzilla/show_bug.cgi?id=33980","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4046","description":"The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application.\n\n\n\nThis vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them."}]},{"artifact":{"id":"447f95d1f2f8faf0","cpes":["cpe:2.3:a:org.springframework.data:spring-data-mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework.data:spring_data_mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-data-mongodb:spring-data-mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-data-mongodb:spring_data_mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_data_mongodb:spring-data-mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_data_mongodb:spring_data_mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-data-mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_data_mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-data:spring-data-mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-data:spring_data_mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_data:spring-data-mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_data:spring_data_mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-data-mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_data_mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:data:spring-data-mongodb:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:data:spring_data_mongodb:3.4.2:*:*:*:*:*:*:*"],"name":"spring-data-mongodb","purl":"pkg:maven/org.springframework.data/spring-data-mongodb@3.4.2","type":"java-archive","version":"3.4.2","language":"java","licenses":[],"metadata":{"pomGroupID":"org.springframework.data","virtualPath":"/usr/lib/unifi/lib/spring-data-mongodb-3.4.2.jar","manifestName":"","pomArtifactID":"spring-data-mongodb","archiveDigests":[{"value":"06792aede77eaa4b6430c09debcdbbb39377de20","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-data-mongodb-3.4.2.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-data-mongodb-3.4.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5whc-4q84-fj73","versionConstraint":"<=3.4.19 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework.data:spring-data-mongodb","version":"3.4.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-5whc-4q84-fj73","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41717","cwe":"CWE-917","type":"Secondary","source":"security@vmware.com"}],"epss":[{"cve":"CVE-2026-41717","date":"2026-10-08","epss":0.00421,"percentile":0.34408}],"risk":0.32838000000000006,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-41717","https://spring.io/security/cve-2026-41717","https://github.com/spring-projects/spring-data-mongodb/releases/tag/4.5.12","https://github.com/spring-projects/spring-data-mongodb/releases/tag/5.0.6"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5whc-4q84-fj73","description":"Spring Data MongoDB is vulnerable to SpEL (Spring Expression Language) expression injection"},"relatedVulnerabilities":[{"id":"CVE-2026-41717","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41717","cwe":"CWE-917","type":"Secondary","source":"security@vmware.com"}],"epss":[{"cve":"CVE-2026-41717","date":"2026-10-08","epss":0.00421,"percentile":0.34408}],"urls":["https://spring.io/security/cve-2026-41717"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-41717","description":"Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder.\n\nAffected versions:\nSpring Data MongoDB 5.0.0 through 5.0.5; 4.5.0 through 4.5.11; 4.4.0 through 4.4.14; 4.3.0 through 4.3.16; 4.2.0 through 4.2.15; 4.1.0 through 4.1.14; 4.0.0 through 4.0.15; 3.4.0 through 3.4.19."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8053","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-8053","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-8053","cwe":"CWE-787","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-8053","date":"2026-10-08","epss":0.00655,"percentile":0.49803}],"risk":0.3275,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-8053"},"relatedVulnerabilities":[{"id":"CVE-2026-8053","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8053","cwe":"CWE-787","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-8053","date":"2026-10-08","epss":0.00655,"percentile":0.49803}],"urls":["https://jira.mongodb.org/browse/SERVER-126021"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8053","description":"An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series bucket catalog. Under certain conditions this can result in arbitrary code execution.\n\nThis issue impacts MongoDB Server v5.0 versions prior to 5.0.33, v6.0 versions prior to 6.0.28, v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8053","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-8053","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-8053","cwe":"CWE-787","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-8053","date":"2026-10-08","epss":0.00655,"percentile":0.49803}],"risk":0.3275,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-8053"},"relatedVulnerabilities":[{"id":"CVE-2026-8053","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8053","cwe":"CWE-787","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-8053","date":"2026-10-08","epss":0.00655,"percentile":0.49803}],"urls":["https://jira.mongodb.org/browse/SERVER-126021"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8053","description":"An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series bucket catalog. Under certain conditions this can result in arbitrary code execution.\n\nThis issue impacts MongoDB Server v5.0 versions prior to 5.0.33, v6.0 versions prior to 6.0.28, v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-8053","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-8053","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-8053","cwe":"CWE-787","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-8053","date":"2026-10-08","epss":0.00655,"percentile":0.49803}],"risk":0.3275,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-8053"},"relatedVulnerabilities":[{"id":"CVE-2026-8053","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8053","cwe":"CWE-787","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-8053","date":"2026-10-08","epss":0.00655,"percentile":0.49803}],"urls":["https://jira.mongodb.org/browse/SERVER-126021"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8053","description":"An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series bucket catalog. Under certain conditions this can result in arbitrary code execution.\n\nThis issue impacts MongoDB Server v5.0 versions prior to 5.0.33, v6.0 versions prior to 6.0.28, v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2."}]},{"artifact":{"id":"97badb9875b0c74a","cpes":["cpe:2.3:a:perl-base:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.4?arch=amd64&distro=ubuntu-20.04&upstream=perl","type":"deb","version":"5.30.0-9ubuntu0.4","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-20230","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"perl","version":"5.30.0-9ubuntu0.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2017-20230","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-20230","cwe":"CWE-121","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2017-20230","date":"2026-10-08","epss":0.00641,"percentile":0.49119}],"risk":0.3205,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2017-20230"},"relatedVulnerabilities":[{"id":"CVE-2017-20230","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":10,"impactScore":6.1,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-20230","cwe":"CWE-121","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2017-20230","date":"2026-10-08","epss":0.00641,"percentile":0.49119}],"urls":["https://github.com/Perl/perl5/commit/a258c17c6937f79529c8319a829310e09cdbd216.patch","https://github.com/Perl/perl5/issues/15831","https://metacpan.org/release/RURBAN/Storable-3.05/changes","https://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242533.html","https://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242703.html","http://www.openwall.com/lists/oss-security/2026/04/21/5"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-20230","description":"Storable versions before 3.05 for Perl has a stack overflow.\n\nThe retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow."}]},{"artifact":{"id":"4d8ca55af2160ac1","cpes":["cpe:2.3:a:org.springframework.boot:spring-boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework.boot:spring_boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework.boot:boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-boot:spring-boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-boot:spring_boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_boot:spring-boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_boot:spring_boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:springframework:boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:boot:spring-boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:boot:spring_boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring-boot:boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring_boot:boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:spring:boot:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:boot:boot:2.7.2:*:*:*:*:*:*:*"],"name":"spring-boot","purl":"pkg:maven/org.springframework.boot/spring-boot@2.7.2","type":"java-archive","version":"2.7.2","language":"java","licenses":["Apache-2.0"],"metadata":{"pomGroupID":"org.springframework.boot","virtualPath":"/usr/lib/unifi/lib/spring-boot-2.7.2.jar","manifestName":"","pomArtifactID":"spring-boot","archiveDigests":[{"value":"a471deae9d806afa28ab888f75d46cff6e2f118c","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-boot-2.7.2.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-boot-2.7.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-rc42-6c7j-7h5r","versionConstraint":"<=2.7.24.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework.boot:spring-boot","version":"2.7.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-rc42-6c7j-7h5r","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-22235","cwe":"CWE-20","type":"Secondary","source":"security@vmware.com"}],"epss":[{"cve":"CVE-2025-22235","date":"2026-10-08","epss":0.00433,"percentile":0.35604}],"risk":0.3204199999999999,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2025-22235","https://spring.io/security/cve-2025-22235","https://security.netapp.com/advisory/ntap-20250516-0010"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-rc42-6c7j-7h5r","description":"Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed"},"relatedVulnerabilities":[{"id":"CVE-2025-22235","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-22235","cwe":"CWE-20","type":"Secondary","source":"security@vmware.com"}],"epss":[{"cve":"CVE-2025-22235","date":"2026-10-08","epss":0.00433,"percentile":0.35604}],"urls":["https://spring.io/security/cve-2025-22235","https://security.netapp.com/advisory/ntap-20250516-0010/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-22235","description":"EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been created, is disabled or not exposed.\n\nYour application may be affected by this if all the following conditions are met:\n\n  *  You use Spring Security\n  *  EndpointRequest.to() has been used in a Spring Security chain configuration\n  *  The endpoint which EndpointRequest references is disabled or not exposed via web\n  *  Your application handles requests to /null and this path needs protection\n\n\nYou are not affected if any of the following is true:\n\n  *  You don't use Spring Security\n  *  You don't use EndpointRequest.to()\n  *  The endpoint which EndpointRequest.to() refers to is enabled and is exposed\n  *  Your application does not handle requests to /null or this path does not need protection"}]},{"artifact":{"id":"3640cf00fde88f22","cpes":["cpe:2.3:a:binutils:binutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-48065","versionConstraint":"< 2.34-6ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2022-48065","fix":{"state":"fixed","versions":["2.34-6ubuntu1.9"],"available":[{"date":"2024-02-26","kind":"advisory","version":"2.34-6ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2022-48065","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48065","date":"2026-10-08","epss":0.00636,"percentile":0.48891}],"risk":0.318,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-48065"},"relatedVulnerabilities":[{"id":"CVE-2022-48065","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-48065","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48065","date":"2026-10-08","epss":0.00636,"percentile":0.48891}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLZXZXFX2ZWTDU2QZUSZG36LZZVTKUVG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/","https://security.netapp.com/advisory/ntap-20231006-0008/","https://sourceware.org/bugzilla/show_bug.cgi?id=29925","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d28fbc7197ba0e021a43f873eff90b05dcdcff6a"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-48065","description":"GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c."}]},{"artifact":{"id":"197555b9cdbc0e71","cpes":["cpe:2.3:a:binutils-common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-common","purl":"pkg:deb/ubuntu/binutils-common@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-48065","versionConstraint":"< 2.34-6ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2022-48065","fix":{"state":"fixed","versions":["2.34-6ubuntu1.9"],"available":[{"date":"2024-02-26","kind":"advisory","version":"2.34-6ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2022-48065","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48065","date":"2026-10-08","epss":0.00636,"percentile":0.48891}],"risk":0.318,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-48065"},"relatedVulnerabilities":[{"id":"CVE-2022-48065","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-48065","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48065","date":"2026-10-08","epss":0.00636,"percentile":0.48891}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLZXZXFX2ZWTDU2QZUSZG36LZZVTKUVG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/","https://security.netapp.com/advisory/ntap-20231006-0008/","https://sourceware.org/bugzilla/show_bug.cgi?id=29925","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d28fbc7197ba0e021a43f873eff90b05dcdcff6a"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-48065","description":"GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c."}]},{"artifact":{"id":"436f5c90439c5365","cpes":["cpe:2.3:a:binutils-x86-64-linux-gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux-gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/binutils-x86-64-linux-gnu@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list"}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-48065","versionConstraint":"< 2.34-6ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2022-48065","fix":{"state":"fixed","versions":["2.34-6ubuntu1.9"],"available":[{"date":"2024-02-26","kind":"advisory","version":"2.34-6ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2022-48065","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48065","date":"2026-10-08","epss":0.00636,"percentile":0.48891}],"risk":0.318,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-48065"},"relatedVulnerabilities":[{"id":"CVE-2022-48065","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-48065","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48065","date":"2026-10-08","epss":0.00636,"percentile":0.48891}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLZXZXFX2ZWTDU2QZUSZG36LZZVTKUVG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/","https://security.netapp.com/advisory/ntap-20231006-0008/","https://sourceware.org/bugzilla/show_bug.cgi?id=29925","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d28fbc7197ba0e021a43f873eff90b05dcdcff6a"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-48065","description":"GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c."}]},{"artifact":{"id":"e8585c2fc66c583c","cpes":["cpe:2.3:a:libbinutils:libbinutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libbinutils","purl":"pkg:deb/ubuntu/libbinutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libbinutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-48065","versionConstraint":"< 2.34-6ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2022-48065","fix":{"state":"fixed","versions":["2.34-6ubuntu1.9"],"available":[{"date":"2024-02-26","kind":"advisory","version":"2.34-6ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2022-48065","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48065","date":"2026-10-08","epss":0.00636,"percentile":0.48891}],"risk":0.318,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-48065"},"relatedVulnerabilities":[{"id":"CVE-2022-48065","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-48065","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48065","date":"2026-10-08","epss":0.00636,"percentile":0.48891}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLZXZXFX2ZWTDU2QZUSZG36LZZVTKUVG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/","https://security.netapp.com/advisory/ntap-20231006-0008/","https://sourceware.org/bugzilla/show_bug.cgi?id=29925","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d28fbc7197ba0e021a43f873eff90b05dcdcff6a"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-48065","description":"GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c."}]},{"artifact":{"id":"e9c23578b20f9960","cpes":["cpe:2.3:a:libctf-nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf-nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf-nobfd0","purl":"pkg:deb/ubuntu/libctf-nobfd0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libctf-nobfd0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf-nobfd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-48065","versionConstraint":"< 2.34-6ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2022-48065","fix":{"state":"fixed","versions":["2.34-6ubuntu1.9"],"available":[{"date":"2024-02-26","kind":"advisory","version":"2.34-6ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2022-48065","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48065","date":"2026-10-08","epss":0.00636,"percentile":0.48891}],"risk":0.318,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-48065"},"relatedVulnerabilities":[{"id":"CVE-2022-48065","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-48065","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48065","date":"2026-10-08","epss":0.00636,"percentile":0.48891}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLZXZXFX2ZWTDU2QZUSZG36LZZVTKUVG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/","https://security.netapp.com/advisory/ntap-20231006-0008/","https://sourceware.org/bugzilla/show_bug.cgi?id=29925","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d28fbc7197ba0e021a43f873eff90b05dcdcff6a"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-48065","description":"GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c."}]},{"artifact":{"id":"5a72139b32f71a25","cpes":["cpe:2.3:a:libctf0:libctf0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf0","purl":"pkg:deb/ubuntu/libctf0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-48065","versionConstraint":"< 2.34-6ubuntu1.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2022-48065","fix":{"state":"fixed","versions":["2.34-6ubuntu1.9"],"available":[{"date":"2024-02-26","kind":"advisory","version":"2.34-6ubuntu1.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2022-48065","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48065","date":"2026-10-08","epss":0.00636,"percentile":0.48891}],"risk":0.318,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2022-48065"},"relatedVulnerabilities":[{"id":"CVE-2022-48065","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-48065","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48065","date":"2026-10-08","epss":0.00636,"percentile":0.48891}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLZXZXFX2ZWTDU2QZUSZG36LZZVTKUVG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/","https://security.netapp.com/advisory/ntap-20231006-0008/","https://sourceware.org/bugzilla/show_bug.cgi?id=29925","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d28fbc7197ba0e021a43f873eff90b05dcdcff6a"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-48065","description":"GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c."}]},{"artifact":{"id":"c9a07c3b9df49ddb","cpes":["cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0-0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*"],"name":"libglib2.0-0","purl":"pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.6?arch=amd64&distro=ubuntu-20.04&upstream=glib2.0","type":"deb","version":"2.64.6-1~ubuntu20.04.6","language":"","licenses":["sha256:f65e92234e97932114d94d72fc898fcddc854345f77caae80af26ad5cd94cce8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libglib2.0-0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libglib2.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glib2.0"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.64.6-1~ubuntu20.04.9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4373","versionConstraint":"< 2.64.6-1~ubuntu20.04.9 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glib2.0","version":"2.64.6-1~ubuntu20.04.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-4373","fix":{"state":"fixed","versions":["2.64.6-1~ubuntu20.04.9"],"available":[{"date":"2025-05-26","kind":"advisory","version":"2.64.6-1~ubuntu20.04.9"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-4373","cwe":"CWE-124","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4373","date":"2026-10-08","epss":0.00636,"percentile":0.48862}],"risk":0.318,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-4373"},"relatedVulnerabilities":[{"id":"CVE-2025-4373","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4373","cwe":"CWE-124","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-4373","date":"2026-10-08","epss":0.00636,"percentile":0.48862}],"urls":["https://access.redhat.com/errata/RHSA-2025:10855","https://access.redhat.com/errata/RHSA-2025:11140","https://access.redhat.com/errata/RHSA-2025:11327","https://access.redhat.com/errata/RHSA-2025:11373","https://access.redhat.com/errata/RHSA-2025:11374","https://access.redhat.com/errata/RHSA-2025:11662","https://access.redhat.com/errata/RHSA-2025:12275","https://access.redhat.com/errata/RHSA-2025:13335","https://access.redhat.com/errata/RHSA-2025:14988","https://access.redhat.com/errata/RHSA-2025:14989","https://access.redhat.com/errata/RHSA-2025:14990","https://access.redhat.com/errata/RHSA-2025:14991","https://access.redhat.com/security/cve/CVE-2025-4373","https://bugzilla.redhat.com/show_bug.cgi?id=2364265","https://gitlab.gnome.org/GNOME/glib/-/issues/3677","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-089022.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4373","description":"A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite."}]},{"artifact":{"id":"3640cf00fde88f22","cpes":["cpe:2.3:a:binutils:binutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-1148","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1148","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1148","date":"2026-10-08","epss":0.00636,"percentile":0.48851}],"risk":0.318,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1148"},"relatedVulnerabilities":[{"id":"CVE-2025-1148","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1148","date":"2026-10-08","epss":0.00636,"percentile":0.48851}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295052","https://vuldb.com/?id.295052","https://vuldb.com/?submit.485747","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250404-0004/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1148","description":"A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c of the component ld. The manipulation leads to memory leak. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"197555b9cdbc0e71","cpes":["cpe:2.3:a:binutils-common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-common","purl":"pkg:deb/ubuntu/binutils-common@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1148","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1148","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1148","date":"2026-10-08","epss":0.00636,"percentile":0.48851}],"risk":0.318,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1148"},"relatedVulnerabilities":[{"id":"CVE-2025-1148","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1148","date":"2026-10-08","epss":0.00636,"percentile":0.48851}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295052","https://vuldb.com/?id.295052","https://vuldb.com/?submit.485747","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250404-0004/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1148","description":"A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c of the component ld. The manipulation leads to memory leak. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"436f5c90439c5365","cpes":["cpe:2.3:a:binutils-x86-64-linux-gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux-gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/binutils-x86-64-linux-gnu@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list"}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1148","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1148","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1148","date":"2026-10-08","epss":0.00636,"percentile":0.48851}],"risk":0.318,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1148"},"relatedVulnerabilities":[{"id":"CVE-2025-1148","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1148","date":"2026-10-08","epss":0.00636,"percentile":0.48851}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295052","https://vuldb.com/?id.295052","https://vuldb.com/?submit.485747","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250404-0004/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1148","description":"A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c of the component ld. The manipulation leads to memory leak. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"e8585c2fc66c583c","cpes":["cpe:2.3:a:libbinutils:libbinutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libbinutils","purl":"pkg:deb/ubuntu/libbinutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libbinutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1148","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1148","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1148","date":"2026-10-08","epss":0.00636,"percentile":0.48851}],"risk":0.318,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1148"},"relatedVulnerabilities":[{"id":"CVE-2025-1148","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1148","date":"2026-10-08","epss":0.00636,"percentile":0.48851}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295052","https://vuldb.com/?id.295052","https://vuldb.com/?submit.485747","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250404-0004/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1148","description":"A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c of the component ld. The manipulation leads to memory leak. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"e9c23578b20f9960","cpes":["cpe:2.3:a:libctf-nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf-nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf-nobfd0","purl":"pkg:deb/ubuntu/libctf-nobfd0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libctf-nobfd0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf-nobfd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1148","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1148","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1148","date":"2026-10-08","epss":0.00636,"percentile":0.48851}],"risk":0.318,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1148"},"relatedVulnerabilities":[{"id":"CVE-2025-1148","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1148","date":"2026-10-08","epss":0.00636,"percentile":0.48851}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295052","https://vuldb.com/?id.295052","https://vuldb.com/?submit.485747","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250404-0004/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1148","description":"A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c of the component ld. The manipulation leads to memory leak. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"5a72139b32f71a25","cpes":["cpe:2.3:a:libctf0:libctf0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf0","purl":"pkg:deb/ubuntu/libctf0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1148","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1148","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1148","date":"2026-10-08","epss":0.00636,"percentile":0.48851}],"risk":0.318,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1148"},"relatedVulnerabilities":[{"id":"CVE-2025-1148","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1148","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1148","date":"2026-10-08","epss":0.00636,"percentile":0.48851}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295052","https://vuldb.com/?id.295052","https://vuldb.com/?submit.485747","https://www.gnu.org/","https://security.netapp.com/advisory/ntap-20250404-0004/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1148","description":"A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c of the component ld. The manipulation leads to memory leak. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"28e1bbe849954ffa","cpes":["cpe:2.3:a:org.springframework:spring-context:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_context:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-context:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_context:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-context:spring-context:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-context:spring_context:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_context:spring-context:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_context:spring_context:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-context:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_context:5.3.22:*:*:*:*:*:*:*"],"name":"spring-context","purl":"pkg:maven/org.springframework/spring-context@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-context-5.3.22.jar","manifestName":"","pomArtifactID":"spring-context","archiveDigests":[{"value":"fdd59bb4795c7a399e95ec4a5c8b91103e3189fd","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-context-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-context-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4gc7-5j7h-4qph","versionConstraint":"<=5.3.40 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-context","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-4gc7-5j7h-4qph","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38820","cwe":"CWE-178","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38820","date":"2026-10-08","epss":0.00617,"percentile":0.47981}],"risk":0.317755,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-38820","https://spring.io/security/cve-2024-38820","https://github.com/spring-projects/spring-framework/commit/23656aebc6c7d0f9faff1080981eb4d55eff296c","https://github.com/spring-projects/spring-framework/commits/v6.2.0-RC2","https://security.netapp.com/advisory/ntap-20241129-0003"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4gc7-5j7h-4qph","description":"Spring Framework DataBinder Case Sensitive Match Exception"},"relatedVulnerabilities":[{"id":"CVE-2024-38820","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38820","cwe":"CWE-178","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38820","date":"2026-10-08","epss":0.00617,"percentile":0.47981}],"urls":["https://spring.io/security/cve-2024-38820","https://security.netapp.com/advisory/ntap-20241129-0003/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-38820","description":"The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected."}]},{"artifact":{"id":"115f8756a931640f","cpes":["cpe:2.3:a:org.springframework:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-web:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_web:spring_web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-web:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_web:5.3.22:*:*:*:*:*:*:*"],"name":"spring-web","purl":"pkg:maven/org.springframework/spring-web@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","manifestName":"","pomArtifactID":"spring-web","archiveDigests":[{"value":"fdab9b8d8df2e6a8fb90f2481c361bcf2c129567","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-web-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4gc7-5j7h-4qph","versionConstraint":"<=5.3.40 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-web","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-4gc7-5j7h-4qph","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38820","cwe":"CWE-178","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38820","date":"2026-10-08","epss":0.00617,"percentile":0.47981}],"risk":0.317755,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-38820","https://spring.io/security/cve-2024-38820","https://github.com/spring-projects/spring-framework/commit/23656aebc6c7d0f9faff1080981eb4d55eff296c","https://github.com/spring-projects/spring-framework/commits/v6.2.0-RC2","https://security.netapp.com/advisory/ntap-20241129-0003"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4gc7-5j7h-4qph","description":"Spring Framework DataBinder Case Sensitive Match Exception"},"relatedVulnerabilities":[{"id":"CVE-2024-38820","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38820","cwe":"CWE-178","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38820","date":"2026-10-08","epss":0.00617,"percentile":0.47981}],"urls":["https://spring.io/security/cve-2024-38820","https://security.netapp.com/advisory/ntap-20241129-0003/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-38820","description":"The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected."}]},{"artifact":{"id":"3fb3b4642e243e5c","cpes":["cpe:2.3:a:libsystemd0:libsystemd0:245.4-4ubuntu3.22:*:*:*:*:*:*:*"],"name":"libsystemd0","purl":"pkg:deb/ubuntu/libsystemd0@245.4-4ubuntu3.22?arch=amd64&distro=ubuntu-20.04&upstream=systemd","type":"deb","version":"245.4-4ubuntu3.22","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsystemd0/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libsystemd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libsystemd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-26604","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"systemd","version":"245.4-4ubuntu3.22"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-26604","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-26604","cwe":"CWE-269","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-26604","date":"2026-10-08","epss":0.01051,"percentile":0.63235}],"risk":0.3153,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-26604"},"relatedVulnerabilities":[{"id":"CVE-2023-26604","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-26604","cwe":"CWE-269","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-26604","date":"2026-10-08","epss":0.01051,"percentile":0.63235}],"urls":["http://packetstormsecurity.com/files/174130/systemd-246-Local-Root-Privilege-Escalation.html","https://blog.compass-security.com/2012/10/dangerous-sudoers-entries-part-2-insecure-functionality/","https://github.com/systemd/systemd/blob/main/NEWS#L4335-L4340","https://lists.debian.org/debian-lts-announce/2023/03/msg00032.html","https://medium.com/%40zenmoviefornotification/saidov-maxim-cve-2023-26604-c1232a526ba7","https://security.netapp.com/advisory/ntap-20230505-0009/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-26604","description":"systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the \"systemctl status\" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output."}]},{"artifact":{"id":"684edf6ead540df1","cpes":["cpe:2.3:a:libudev1:libudev1:245.4-4ubuntu3.22:*:*:*:*:*:*:*"],"name":"libudev1","purl":"pkg:deb/ubuntu/libudev1@245.4-4ubuntu3.22?arch=amd64&distro=ubuntu-20.04&upstream=systemd","type":"deb","version":"245.4-4ubuntu3.22","language":"","licenses":["CC0-1.0","Expat","GPL-2","GPL-2+","LGPL-2.1","LGPL-2.1+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libudev1/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libudev1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libudev1:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libudev1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"systemd"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-26604","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"systemd","version":"245.4-4ubuntu3.22"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-26604","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-26604","cwe":"CWE-269","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-26604","date":"2026-10-08","epss":0.01051,"percentile":0.63235}],"risk":0.3153,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-26604"},"relatedVulnerabilities":[{"id":"CVE-2023-26604","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-26604","cwe":"CWE-269","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-26604","date":"2026-10-08","epss":0.01051,"percentile":0.63235}],"urls":["http://packetstormsecurity.com/files/174130/systemd-246-Local-Root-Privilege-Escalation.html","https://blog.compass-security.com/2012/10/dangerous-sudoers-entries-part-2-insecure-functionality/","https://github.com/systemd/systemd/blob/main/NEWS#L4335-L4340","https://lists.debian.org/debian-lts-announce/2023/03/msg00032.html","https://medium.com/%40zenmoviefornotification/saidov-maxim-cve-2023-26604-c1232a526ba7","https://security.netapp.com/advisory/ntap-20230505-0009/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-26604","description":"systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the \"systemctl status\" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output."}]},{"artifact":{"id":"97badb9875b0c74a","cpes":["cpe:2.3:a:perl-base:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.4?arch=amd64&distro=ubuntu-20.04&upstream=perl","type":"deb","version":"5.30.0-9ubuntu0.4","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-82560","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"perl","version":"5.30.0-9ubuntu0.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-82560","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-82560","cwe":"CWE-835","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-82560","date":"2026-10-08","epss":0.0063,"percentile":0.48579}],"risk":0.315,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-82560"},"relatedVulnerabilities":[{"id":"CVE-2026-82560","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82560","cwe":"CWE-835","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-82560","date":"2026-10-08","epss":0.0063,"percentile":0.48579}],"urls":["https://github.com/rra/podlators/commit/70510174f69eb54aa6d617bde4e1402cd9b7c61f.patch","https://metacpan.org/release/RRA/podlators-v6.1.0/source/lib/Pod/Text.pm#L245-261","https://metacpan.org/release/RRA/podlators-v6.1.1/changes","http://www.openwall.com/lists/oss-security/2026/09/19/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-82560","description":"Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width.\n\nEach =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass.\n\nFormatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted."}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0915","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-0915","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-08","epss":0.00627,"percentile":0.48446}],"risk":0.3135,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-0915"},"relatedVulnerabilities":[{"id":"CVE-2026-0915","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-08","epss":0.00627,"percentile":0.48446}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33802","http://www.openwall.com/lists/oss-security/2026/01/16/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0915","description":"Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0915","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-0915","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-08","epss":0.00627,"percentile":0.48446}],"risk":0.3135,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-0915"},"relatedVulnerabilities":[{"id":"CVE-2026-0915","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-08","epss":0.00627,"percentile":0.48446}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33802","http://www.openwall.com/lists/oss-security/2026/01/16/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0915","description":"Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver."}]},{"artifact":{"id":"b082b70df3e54e06","cpes":["cpe:2.3:a:locales:locales:2.31-0ubuntu9.14:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.31-0ubuntu9.14?arch=all&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.14","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-0915","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.14"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-0915","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-08","epss":0.00627,"percentile":0.48446}],"risk":0.3135,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-0915"},"relatedVulnerabilities":[{"id":"CVE-2026-0915","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-0915","cwe":"CWE-908","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-0915","date":"2026-10-08","epss":0.00627,"percentile":0.48446}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33802","http://www.openwall.com/lists/oss-security/2026/01/16/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-0915","description":"Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.15+6~us1-0ubuntu1~20.04"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-30698","versionConstraint":"< 17.0.15+6~us1-0ubuntu1~20.04 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-30698","fix":{"state":"fixed","versions":["17.0.15+6~us1-0ubuntu1~20.04"],"available":[{"date":"2025-05-06","kind":"advisory","version":"17.0.15+6~us1-0ubuntu1~20.04"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-30698","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-30698","date":"2026-10-08","epss":0.00616,"percentile":0.47883}],"risk":0.308,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-30698"},"relatedVulnerabilities":[{"id":"CVE-2025-30698","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-30698","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-30698","date":"2026-10-08","epss":0.00616,"percentile":0.47883}],"urls":["https://www.oracle.com/security-alerts/cpuapr2025.html","https://lists.debian.org/debian-lts-announce/2025/05/msg00026.html","https://security.netapp.com/advisory/ntap-20250502-0005/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-30698","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14, 21.0.6, 24; Oracle GraalVM Enterprise Edition: 20.3.17 and  21.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.6 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)."}]},{"artifact":{"id":"97badb9875b0c74a","cpes":["cpe:2.3:a:perl-base:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.30.0-9ubuntu0.4:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/ubuntu/perl-base@5.30.0-9ubuntu0.4?arch=amd64&distro=ubuntu-20.04&upstream=perl","type":"deb","version":"5.30.0-9ubuntu0.4","language":"","licenses":["Artistic","Artistic-2","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","Expat","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","HSIEH-BSD","HSIEH-DERIVATIVE","LGPL-2.1","REGCOMP","REGCOMP,","RRA-KEEP-THIS-NOTICE","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.list"},{"path":"/var/lib/dpkg/info/perl-base.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.postinst"},{"path":"/var/lib/dpkg/info/perl-base.postrm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.postrm"},{"path":"/var/lib/dpkg/info/perl-base.preinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.preinst"},{"path":"/var/lib/dpkg/info/perl-base.prerm","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/perl-base.prerm"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-48959","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"perl","version":"5.30.0-9ubuntu0.4"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-48959","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-48959","cwe":"CWE-407","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-48959","date":"2026-10-08","epss":0.00609,"percentile":0.47546}],"risk":0.3045,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-48959"},"relatedVulnerabilities":[{"id":"CVE-2026-48959","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-48959","cwe":"CWE-407","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-48959","date":"2026-10-08","epss":0.00609,"percentile":0.47546}],"urls":["https://github.com/pmqs/IO-Compress/commit/68db44076f4c1a86a2ffe53a958eac6cabaf72e2.patch","https://metacpan.org/release/PMQS/IO-Compress-2.220/changes","http://www.openwall.com/lists/oss-security/2026/05/27/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-48959","description":"IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward.\n\nfastForward() compares length $offset (the digit count of the offset, 1 to 19) against the chunk size $c instead of $offset itself, so $c shrinks from 16 KiB to 1-19 bytes per iteration.\n\nExtracting a named entry from an attacker supplied zip via IO::Uncompress::Unzip->new($zip, Name => $target) drives a per-byte read loop scaling with the entry's compressed size, up to the non-Zip64 4 GiB cap."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.13+11-2ubuntu1~20.04"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-21208","versionConstraint":"< 17.0.13+11-2ubuntu1~20.04 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-21208","fix":{"state":"fixed","versions":["17.0.13+11-2ubuntu1~20.04"],"available":[{"date":"2024-11-11","kind":"advisory","version":"17.0.13+11-2ubuntu1~20.04"}]},"cvss":[],"cwes":[{"cve":"CVE-2024-21208","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21208","date":"2026-10-08","epss":0.01012,"percentile":0.62079}],"risk":0.3036,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-21208"},"relatedVulnerabilities":[{"id":"CVE-2024-21208","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-21208","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-21208","date":"2026-10-08","epss":0.01012,"percentile":0.62079}],"urls":["https://www.oracle.com/security-alerts/cpuoct2024.html","https://lists.debian.org/debian-lts-announce/2024/10/msg00020.html","https://security.netapp.com/advisory/ntap-20241018-0010/","https://openjdk.org/groups/vulnerability/advisories/2024-10-15"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-21208","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"8513c7044936c4cf","cpes":["cpe:2.3:a:apache:tomcat-embed-core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat_embed_core:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:tomcat:9.0.65:*:*:*:*:*:*:*","cpe:2.3:a:apache:embed:9.0.65:*:*:*:*:*:*:*"],"name":"tomcat-embed-core","purl":"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.65","type":"java-archive","version":"9.0.65","language":"java","licenses":["Apache-2.0","CDDL-1.0"],"metadata":{"pomGroupID":"org.apache.tomcat.embed","virtualPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","manifestName":"","pomArtifactID":"tomcat-embed-core","archiveDigests":[{"value":"a24c5f379b2ec343a167a83332b75c37f26b2ae7","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/tomcat-embed-core-9.0.65.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.0.116"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9m3c-qcxr-9x87","versionConstraint":">=8.5.30,<9.0.116 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.tomcat.embed:tomcat-embed-core","version":"9.0.65"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-9m3c-qcxr-9x87","fix":{"state":"fixed","versions":["9.0.116"],"available":[{"date":"2026-04-11","kind":"first-observed","version":"9.0.116"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-25854","cwe":"CWE-601","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-25854","date":"2026-10-08","epss":0.00526,"percentile":0.42738}],"risk":0.30245,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-25854","https://lists.apache.org/thread/ghct3b6o74bp2vm7q875s1zh0dqrz3h0","http://www.openwall.com/lists/oss-security/2026/04/09/21"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9m3c-qcxr-9x87","description":"Apache Tomcat has an Open Redirect vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2026-25854","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-25854","cwe":"CWE-601","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-25854","date":"2026-10-08","epss":0.00526,"percentile":0.42738}],"urls":["https://lists.apache.org/thread/ghct3b6o74bp2vm7q875s1zh0dqrz3h0","http://www.openwall.com/lists/oss-security/2026/04/09/21"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-25854","description":"Occasional URL redirection to untrusted Site ('Open Redirect') vulnerability in Apache Tomcat via the LoadBalancerDrainingValve.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M1 through 10.1.52, from 9.0.0.M23 through 9.0.115, from 8.5.30 through 8.5.100.\nOther, unsupported versions may also be affected\n\nUsers are recommended to upgrade to version 11.0.20, 10.1.53 or 9.0.116, which fix the issue."}]},{"artifact":{"id":"a3c8be6e73e8dbb2","cpes":["cpe:2.3:a:jq:jq:1.6-1ubuntu0.20.04.1:*:*:*:*:*:*:*"],"name":"jq","purl":"pkg:deb/ubuntu/jq@1.6-1ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.6-1ubuntu0.20.04.1","language":"","licenses":["CC-BY-3.0","Expat","GPL-2","GPL-2.0+","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/jq/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/jq/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/jq.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/jq.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/jq.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/jq.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-40164","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"jq","version":"1.6-1ubuntu0.20.04.1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-40164","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-40164","cwe":"CWE-328","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-40164","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-40164","cwe":"CWE-341","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-40164","date":"2026-10-08","epss":0.00593,"percentile":0.46697}],"risk":0.29650000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-40164"},"relatedVulnerabilities":[{"id":"CVE-2026-40164","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40164","cwe":"CWE-328","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-40164","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-40164","cwe":"CWE-341","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-40164","date":"2026-10-08","epss":0.00593,"percentile":0.46697}],"urls":["https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784","https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29","https://access.redhat.com/errata/RHSA-2026:16252","https://access.redhat.com/errata/RHSA-2026:16692","https://access.redhat.com/errata/RHSA-2026:16693","https://access.redhat.com/errata/RHSA-2026:18040","https://access.redhat.com/errata/RHSA-2026:18042","https://access.redhat.com/errata/RHSA-2026:18043","https://access.redhat.com/errata/RHSA-2026:18044","https://access.redhat.com/errata/RHSA-2026:18045","https://access.redhat.com/errata/RHSA-2026:18046","https://access.redhat.com/errata/RHSA-2026:18047","https://access.redhat.com/errata/RHSA-2026:18048","https://access.redhat.com/errata/RHSA-2026:19151","https://access.redhat.com/errata/RHSA-2026:19365","https://access.redhat.com/errata/RHSA-2026:23233","https://access.redhat.com/errata/RHSA-2026:23245","https://access.redhat.com/errata/RHSA-2026:25044","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:25181","https://access.redhat.com/errata/RHSA-2026:26528","https://access.redhat.com/errata/RHSA-2026:26542","https://access.redhat.com/errata/RHSA-2026:28887","https://access.redhat.com/errata/RHSA-2026:30078","https://access.redhat.com/errata/RHSA-2026:30087","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:30089","https://access.redhat.com/errata/RHSA-2026:34098","https://access.redhat.com/errata/RHSA-2026:8579","https://access.redhat.com/security/cve/CVE-2026-40164","https://bugzilla.redhat.com/show_bug.cgi?id=2458084","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40164.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40164","description":"jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed (0x432A9843) for all JSON object hash table operations, which allowed an attacker to precompute key collisions offline. By supplying a crafted JSON object (~100 KB) where all keys hashed to the same bucket, hash table lookups degraded from O(1) to O(n), turning any jq expression into an O(n²) operation and causing significant CPU exhaustion. This affected common jq use cases such as CI/CD pipelines, web services, and data processing scripts, and was far more practical to exploit than existing heap overflow issues since it required only a small payload. This issue has been patched in commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784."}]},{"artifact":{"id":"1b5952588f5c6c07","cpes":["cpe:2.3:a:libjq1:libjq1:1.6-1ubuntu0.20.04.1:*:*:*:*:*:*:*"],"name":"libjq1","purl":"pkg:deb/ubuntu/libjq1@1.6-1ubuntu0.20.04.1?arch=amd64&distro=ubuntu-20.04&upstream=jq","type":"deb","version":"1.6-1ubuntu0.20.04.1","language":"","licenses":["CC-BY-3.0","Expat","GPL-2","GPL-2.0+","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libjq1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libjq1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libjq1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libjq1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"jq"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-40164","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"jq","version":"1.6-1ubuntu0.20.04.1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-40164","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-40164","cwe":"CWE-328","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-40164","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-40164","cwe":"CWE-341","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-40164","date":"2026-10-08","epss":0.00593,"percentile":0.46697}],"risk":0.29650000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-40164"},"relatedVulnerabilities":[{"id":"CVE-2026-40164","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40164","cwe":"CWE-328","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-40164","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-40164","cwe":"CWE-341","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-40164","date":"2026-10-08","epss":0.00593,"percentile":0.46697}],"urls":["https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784","https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29","https://access.redhat.com/errata/RHSA-2026:16252","https://access.redhat.com/errata/RHSA-2026:16692","https://access.redhat.com/errata/RHSA-2026:16693","https://access.redhat.com/errata/RHSA-2026:18040","https://access.redhat.com/errata/RHSA-2026:18042","https://access.redhat.com/errata/RHSA-2026:18043","https://access.redhat.com/errata/RHSA-2026:18044","https://access.redhat.com/errata/RHSA-2026:18045","https://access.redhat.com/errata/RHSA-2026:18046","https://access.redhat.com/errata/RHSA-2026:18047","https://access.redhat.com/errata/RHSA-2026:18048","https://access.redhat.com/errata/RHSA-2026:19151","https://access.redhat.com/errata/RHSA-2026:19365","https://access.redhat.com/errata/RHSA-2026:23233","https://access.redhat.com/errata/RHSA-2026:23245","https://access.redhat.com/errata/RHSA-2026:25044","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:25181","https://access.redhat.com/errata/RHSA-2026:26528","https://access.redhat.com/errata/RHSA-2026:26542","https://access.redhat.com/errata/RHSA-2026:28887","https://access.redhat.com/errata/RHSA-2026:30078","https://access.redhat.com/errata/RHSA-2026:30087","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:30089","https://access.redhat.com/errata/RHSA-2026:34098","https://access.redhat.com/errata/RHSA-2026:8579","https://access.redhat.com/security/cve/CVE-2026-40164","https://bugzilla.redhat.com/show_bug.cgi?id=2458084","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40164.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40164","description":"jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed (0x432A9843) for all JSON object hash table operations, which allowed an attacker to precompute key collisions offline. By supplying a crafted JSON object (~100 KB) where all keys hashed to the same bucket, hash table lookups degraded from O(1) to O(n), turning any jq expression into an O(n²) operation and causing significant CPU exhaustion. This affected common jq use cases such as CI/CD pipelines, web services, and data processing scripts, and was far more practical to exploit than existing heap overflow issues since it required only a small payload. This issue has been patched in commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784."}]},{"artifact":{"id":"3640cf00fde88f22","cpes":["cpe:2.3:a:binutils:binutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-1182","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1182","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1182","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1182","date":"2026-10-08","epss":0.00593,"percentile":0.46664}],"risk":0.29650000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1182"},"relatedVulnerabilities":[{"id":"CVE-2025-1182","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1182","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1182","date":"2026-10-08","epss":0.00593,"percentile":0.46664}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15919","https://sourceware.org/bugzilla/show_bug.cgi?id=32644","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b425859021d17adf62f06fb904797cf8642986ad","https://vuldb.com/?ctiid.295086","https://vuldb.com/?id.295086","https://vuldb.com/?submit.495407","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1182","description":"A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as b425859021d17adf62f06fb904797cf8642986ad. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"197555b9cdbc0e71","cpes":["cpe:2.3:a:binutils-common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-common","purl":"pkg:deb/ubuntu/binutils-common@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1182","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1182","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1182","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1182","date":"2026-10-08","epss":0.00593,"percentile":0.46664}],"risk":0.29650000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1182"},"relatedVulnerabilities":[{"id":"CVE-2025-1182","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1182","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1182","date":"2026-10-08","epss":0.00593,"percentile":0.46664}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15919","https://sourceware.org/bugzilla/show_bug.cgi?id=32644","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b425859021d17adf62f06fb904797cf8642986ad","https://vuldb.com/?ctiid.295086","https://vuldb.com/?id.295086","https://vuldb.com/?submit.495407","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1182","description":"A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as b425859021d17adf62f06fb904797cf8642986ad. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"436f5c90439c5365","cpes":["cpe:2.3:a:binutils-x86-64-linux-gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux-gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/binutils-x86-64-linux-gnu@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list"}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1182","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1182","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1182","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1182","date":"2026-10-08","epss":0.00593,"percentile":0.46664}],"risk":0.29650000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1182"},"relatedVulnerabilities":[{"id":"CVE-2025-1182","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1182","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1182","date":"2026-10-08","epss":0.00593,"percentile":0.46664}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15919","https://sourceware.org/bugzilla/show_bug.cgi?id=32644","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b425859021d17adf62f06fb904797cf8642986ad","https://vuldb.com/?ctiid.295086","https://vuldb.com/?id.295086","https://vuldb.com/?submit.495407","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1182","description":"A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as b425859021d17adf62f06fb904797cf8642986ad. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"e8585c2fc66c583c","cpes":["cpe:2.3:a:libbinutils:libbinutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libbinutils","purl":"pkg:deb/ubuntu/libbinutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libbinutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1182","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1182","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1182","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1182","date":"2026-10-08","epss":0.00593,"percentile":0.46664}],"risk":0.29650000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1182"},"relatedVulnerabilities":[{"id":"CVE-2025-1182","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1182","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1182","date":"2026-10-08","epss":0.00593,"percentile":0.46664}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15919","https://sourceware.org/bugzilla/show_bug.cgi?id=32644","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b425859021d17adf62f06fb904797cf8642986ad","https://vuldb.com/?ctiid.295086","https://vuldb.com/?id.295086","https://vuldb.com/?submit.495407","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1182","description":"A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as b425859021d17adf62f06fb904797cf8642986ad. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"e9c23578b20f9960","cpes":["cpe:2.3:a:libctf-nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf-nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf-nobfd0","purl":"pkg:deb/ubuntu/libctf-nobfd0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libctf-nobfd0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf-nobfd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1182","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1182","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1182","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1182","date":"2026-10-08","epss":0.00593,"percentile":0.46664}],"risk":0.29650000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1182"},"relatedVulnerabilities":[{"id":"CVE-2025-1182","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1182","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1182","date":"2026-10-08","epss":0.00593,"percentile":0.46664}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15919","https://sourceware.org/bugzilla/show_bug.cgi?id=32644","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b425859021d17adf62f06fb904797cf8642986ad","https://vuldb.com/?ctiid.295086","https://vuldb.com/?id.295086","https://vuldb.com/?submit.495407","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1182","description":"A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as b425859021d17adf62f06fb904797cf8642986ad. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"5a72139b32f71a25","cpes":["cpe:2.3:a:libctf0:libctf0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf0","purl":"pkg:deb/ubuntu/libctf0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.34-6ubuntu1.11"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1182","versionConstraint":"< 2.34-6ubuntu1.11 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1182","fix":{"state":"fixed","versions":["2.34-6ubuntu1.11"],"available":[{"date":"2025-04-07","kind":"advisory","version":"2.34-6ubuntu1.11"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-1182","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1182","date":"2026-10-08","epss":0.00593,"percentile":0.46664}],"risk":0.29650000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1182"},"relatedVulnerabilities":[{"id":"CVE-2025-1182","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1182","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1182","date":"2026-10-08","epss":0.00593,"percentile":0.46664}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15919","https://sourceware.org/bugzilla/show_bug.cgi?id=32644","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b425859021d17adf62f06fb904797cf8642986ad","https://vuldb.com/?ctiid.295086","https://vuldb.com/?id.295086","https://vuldb.com/?submit.495407","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1182","description":"A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as b425859021d17adf62f06fb904797cf8642986ad. It is recommended to apply a patch to fix this issue."}]},{"artifact":{"id":"02a2cda4e2596879","cpes":["cpe:2.3:a:curl:curl:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-7168","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-7168","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-7168","date":"2026-10-08","epss":0.00591,"percentile":0.46599}],"risk":0.29550000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-7168"},"relatedVulnerabilities":[{"id":"CVE-2026-7168","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-7168","date":"2026-10-08","epss":0.00591,"percentile":0.46599}],"urls":["https://curl.se/docs/CVE-2026-7168.html","https://curl.se/docs/CVE-2026-7168.json","https://hackerone.com/reports/3697719","http://www.openwall.com/lists/oss-security/2026/04/29/14"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7168","description":"Successfully using libcurl to do a transfer over a specific HTTP proxy\n(`proxyA`) with **Digest** authentication and then changing the proxy host to\na second one (`proxyB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Proxy-Authorization:` header field meant for\n`proxyA`, to `proxyB`."}]},{"artifact":{"id":"5bfe812075df9ecc","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04&upstream=curl","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-7168","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-7168","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-7168","date":"2026-10-08","epss":0.00591,"percentile":0.46599}],"risk":0.29550000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-7168"},"relatedVulnerabilities":[{"id":"CVE-2026-7168","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-7168","cwe":"CWE-294","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2026-7168","date":"2026-10-08","epss":0.00591,"percentile":0.46599}],"urls":["https://curl.se/docs/CVE-2026-7168.html","https://curl.se/docs/CVE-2026-7168.json","https://hackerone.com/reports/3697719","http://www.openwall.com/lists/oss-security/2026/04/29/14"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-7168","description":"Successfully using libcurl to do a transfer over a specific HTTP proxy\n(`proxyA`) with **Digest** authentication and then changing the proxy host to\na second one (`proxyB`) for a second transfer, reusing the same handle, makes\nlibcurl wrongly pass on the `Proxy-Authorization:` header field meant for\n`proxyA`, to `proxyB`."}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.18"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4802","versionConstraint":"< 2.31-0ubuntu9.18 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-4802","fix":{"state":"fixed","versions":["2.31-0ubuntu9.18"],"available":[{"date":"2025-05-28","kind":"advisory","version":"2.31-0ubuntu9.18"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-4802","cwe":"CWE-426","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-4802","date":"2026-10-08","epss":0.0059,"percentile":0.46556}],"risk":0.295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-4802"},"relatedVulnerabilities":[{"id":"CVE-2025-4802","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4802","cwe":"CWE-426","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-4802","date":"2026-10-08","epss":0.0059,"percentile":0.46556}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=32976","https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e","http://www.openwall.com/lists/oss-security/2025/05/16/7","http://www.openwall.com/lists/oss-security/2025/05/17/2","https://lists.debian.org/debian-lts-announce/2025/05/msg00033.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4802","description":"Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo)."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.18"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4802","versionConstraint":"< 2.31-0ubuntu9.18 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-4802","fix":{"state":"fixed","versions":["2.31-0ubuntu9.18"],"available":[{"date":"2025-05-28","kind":"advisory","version":"2.31-0ubuntu9.18"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-4802","cwe":"CWE-426","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-4802","date":"2026-10-08","epss":0.0059,"percentile":0.46556}],"risk":0.295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-4802"},"relatedVulnerabilities":[{"id":"CVE-2025-4802","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4802","cwe":"CWE-426","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-4802","date":"2026-10-08","epss":0.0059,"percentile":0.46556}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=32976","https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e","http://www.openwall.com/lists/oss-security/2025/05/16/7","http://www.openwall.com/lists/oss-security/2025/05/17/2","https://lists.debian.org/debian-lts-announce/2025/05/msg00033.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4802","description":"Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo)."}]},{"artifact":{"id":"b082b70df3e54e06","cpes":["cpe:2.3:a:locales:locales:2.31-0ubuntu9.14:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.31-0ubuntu9.14?arch=all&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.14","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.31-0ubuntu9.18"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-4802","versionConstraint":"< 2.31-0ubuntu9.18 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.14"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-4802","fix":{"state":"fixed","versions":["2.31-0ubuntu9.18"],"available":[{"date":"2025-05-28","kind":"advisory","version":"2.31-0ubuntu9.18"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-4802","cwe":"CWE-426","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-4802","date":"2026-10-08","epss":0.0059,"percentile":0.46556}],"risk":0.295,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-4802"},"relatedVulnerabilities":[{"id":"CVE-2025-4802","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-4802","cwe":"CWE-426","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2025-4802","date":"2026-10-08","epss":0.0059,"percentile":0.46556}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=32976","https://sourceware.org/cgit/glibc/commit/?id=1e18586c5820e329f741d5c710275e165581380e","http://www.openwall.com/lists/oss-security/2025/05/16/7","http://www.openwall.com/lists/oss-security/2025/05/17/2","https://lists.debian.org/debian-lts-announce/2025/05/msg00033.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-4802","description":"Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo)."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84782","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-84782","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-08","epss":0.0039,"percentile":0.31045}],"risk":0.2925,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-84782"},"relatedVulnerabilities":[{"id":"CVE-2026-84782","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-08","epss":0.0039,"percentile":0.31045}],"urls":["https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943","https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628","https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58","https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84782","description":"Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-84782","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-84782","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-08","epss":0.0039,"percentile":0.31045}],"risk":0.2925,"urls":[],"severity":"High","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-84782"},"relatedVulnerabilities":[{"id":"CVE-2026-84782","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-08","epss":0.0039,"percentile":0.31045}],"urls":["https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943","https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628","https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58","https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84782","description":"Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"fix":{"suggestedVersion":"17.0.15+6~us1-0ubuntu1~20.04"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-30691","versionConstraint":"< 17.0.15+6~us1-0ubuntu1~20.04 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-30691","fix":{"state":"fixed","versions":["17.0.15+6~us1-0ubuntu1~20.04"],"available":[{"date":"2025-05-06","kind":"advisory","version":"17.0.15+6~us1-0ubuntu1~20.04"}]},"cvss":[],"cwes":[{"cve":"CVE-2025-30691","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-30691","date":"2026-10-08","epss":0.00585,"percentile":0.46273}],"risk":0.2925,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-30691"},"relatedVulnerabilities":[{"id":"CVE-2025-30691","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-30691","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-30691","date":"2026-10-08","epss":0.00585,"percentile":0.46273}],"urls":["https://www.oracle.com/security-alerts/cpuapr2025.html","https://lists.debian.org/debian-lts-announce/2025/05/msg00026.html","https://security.netapp.com/advisory/ntap-20250418-0004/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-30691","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and  24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"02a2cda4e2596879","cpes":["cpe:2.3:a:curl:curl:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/ubuntu/curl@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-18924","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-18924","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-18924","date":"2026-10-08","epss":0.00584,"percentile":0.46233}],"risk":0.292,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-18924"},"relatedVulnerabilities":[{"id":"CVE-2026-18924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-18924","date":"2026-10-08","epss":0.00584,"percentile":0.46233}],"urls":["https://curl.se/docs/CVE-2026-18924.html","https://curl.se/docs/CVE-2026-18924.json","https://hackerone.com/reports/3916059"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18924","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process."}]},{"artifact":{"id":"5bfe812075df9ecc","cpes":["cpe:2.3:a:libcurl4:libcurl4:7.68.0-1ubuntu2.21:*:*:*:*:*:*:*"],"name":"libcurl4","purl":"pkg:deb/ubuntu/libcurl4@7.68.0-1ubuntu2.21?arch=amd64&distro=ubuntu-20.04&upstream=curl","type":"deb","version":"7.68.0-1ubuntu2.21","language":"","licenses":["BSD-3-Clause","BSD-4-Clause","ISC","curl","other","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libcurl4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libcurl4:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-18924","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"curl","version":"7.68.0-1ubuntu2.21"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-18924","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-18924","date":"2026-10-08","epss":0.00584,"percentile":0.46233}],"risk":0.292,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-18924"},"relatedVulnerabilities":[{"id":"CVE-2026-18924","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"cve":"CVE-2026-18924","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-18924","date":"2026-10-08","epss":0.00584,"percentile":0.46233}],"urls":["https://curl.se/docs/CVE-2026-18924.html","https://curl.se/docs/CVE-2026-18924.json","https://hackerone.com/reports/3916059"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18924","description":"A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent\nhandle is set to share connections with other handles, can lead to\nuse-after-free in the cleanup process."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-9076","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-9076","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-9076","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-9076","date":"2026-10-08","epss":0.00973,"percentile":0.60827}],"risk":0.2919,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-9076"},"relatedVulnerabilities":[{"id":"CVE-2026-9076","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9076","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-9076","date":"2026-10-08","epss":0.00973,"percentile":0.60827}],"urls":["https://github.com/openssl/openssl/commit/05b066366842f930fadd9a6e94df98030af431bb","https://github.com/openssl/openssl/commit/3d8d5bc1056b2f62da9fede23fedbf47e85187b0","https://github.com/openssl/openssl/commit/715349a1d7c6db970e6815dafb90915f07307f98","https://github.com/openssl/openssl/commit/77bf00ab13f6ff5e516535432f0328ed70ec0c26","https://github.com/openssl/openssl/commit/eecbe330977e8d023aae1ca2d9bdbe983ef3fdc6","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9076","description":"Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)\nprocesses attacker-supplied CMS data, an attacker-chosen stream-mode KEK\ncipher can trigger a heap out-of-bounds read in kek_unwrap_key().\n\nImpact summary: A heap buffer over-read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not revealed to the attacker.\n\nThe key unwrapping function performs a check-byte test as specified in the\nRFC that reads 7 bytes from a heap allocation that is based on the wrapped\nkey length from the message. There is a minimum length check based on the\nblock length of the wrapping cipher. However the cipher is selected from\nan OID carried in the attacker's PWRI keyEncryptionAlgorithm with no\nrequirement that the cipher be a block cipher. When an attacker selects\na stream-mode cipher the guard will be ineffective and the allocated buffer\ncontaining the unwrapped key can be too small to fit the check-bytes\nspecified in the RFC and a buffer over-read can happen.\n\nApplications calling CMS_decrypt() or CMS_decrypt_set1_password()\n(equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS\ndata are vulnerable to this issue. No password knowledge is required: the\nover-read happens during the unwrap attempt before any authentication\nsucceeds.\n\nThe over-read is limited to a few bytes and is not written to output, so\nthere is no information disclosure. Triggering a crash requires the\nallocation to border unmapped memory, which is unlikely with the normal\nallocator.\n\nThe FIPS modules are not affected by this issue."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-9076","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-9076","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-9076","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-9076","date":"2026-10-08","epss":0.00973,"percentile":0.60827}],"risk":0.2919,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-9076"},"relatedVulnerabilities":[{"id":"CVE-2026-9076","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9076","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-9076","date":"2026-10-08","epss":0.00973,"percentile":0.60827}],"urls":["https://github.com/openssl/openssl/commit/05b066366842f930fadd9a6e94df98030af431bb","https://github.com/openssl/openssl/commit/3d8d5bc1056b2f62da9fede23fedbf47e85187b0","https://github.com/openssl/openssl/commit/715349a1d7c6db970e6815dafb90915f07307f98","https://github.com/openssl/openssl/commit/77bf00ab13f6ff5e516535432f0328ed70ec0c26","https://github.com/openssl/openssl/commit/eecbe330977e8d023aae1ca2d9bdbe983ef3fdc6","https://openssl-library.org/news/secadv/20260609.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9076","description":"Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)\nprocesses attacker-supplied CMS data, an attacker-chosen stream-mode KEK\ncipher can trigger a heap out-of-bounds read in kek_unwrap_key().\n\nImpact summary: A heap buffer over-read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not revealed to the attacker.\n\nThe key unwrapping function performs a check-byte test as specified in the\nRFC that reads 7 bytes from a heap allocation that is based on the wrapped\nkey length from the message. There is a minimum length check based on the\nblock length of the wrapping cipher. However the cipher is selected from\nan OID carried in the attacker's PWRI keyEncryptionAlgorithm with no\nrequirement that the cipher be a block cipher. When an attacker selects\na stream-mode cipher the guard will be ineffective and the allocated buffer\ncontaining the unwrapped key can be too small to fit the check-bytes\nspecified in the RFC and a buffer over-read can happen.\n\nApplications calling CMS_decrypt() or CMS_decrypt_set1_password()\n(equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS\ndata are vulnerable to this issue. No password knowledge is required: the\nover-read happens during the unwrap attempt before any authentication\nsucceeds.\n\nThe over-read is limited to a few bytes and is not written to output, so\nthere is no information disclosure. Triggering a crash requires the\nallocation to border unmapped memory, which is unlikely with the normal\nallocator.\n\nThe FIPS modules are not affected by this issue."}]},{"artifact":{"id":"8ef7fd2456ca6e5c","cpes":["cpe:2.3:a:com.google.guava:guava:31.0.1-jre:*:*:*:*:*:*:*","cpe:2.3:a:google:guava:31.0.1-jre:*:*:*:*:*:*:*","cpe:2.3:a:guava:guava:31.0.1-jre:*:*:*:*:*:*:*"],"name":"guava","purl":"pkg:maven/com.google.guava/guava@31.0.1-jre","type":"java-archive","version":"31.0.1-jre","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.google.guava","virtualPath":"/usr/lib/unifi/lib/guava-31.0.1-jre.jar","manifestName":"","pomArtifactID":"guava","archiveDigests":[{"value":"119ea2b2bc205b138974d351777b20f02b92704b","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/guava-31.0.1-jre.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/guava-31.0.1-jre.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32.0.0-android"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5mg8-w23w-74h3","versionConstraint":"<32.0.0-android (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.google.guava:guava","version":"31.0.1-jre"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-5mg8-w23w-74h3","fix":{"state":"fixed","versions":["32.0.0-android"],"available":[{"date":"2023-11-10","kind":"first-observed","version":"32.0.0-android"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8908","cwe":"CWE-378","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2020-8908","cwe":"CWE-732","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8908","date":"2026-10-08","epss":0.00924,"percentile":0.59197}],"risk":0.29105999999999993,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2020-8908","https://github.com/google/guava/issues/4011","https://github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40","https://lists.apache.org/thread.html/r215b3d50f56faeb2f9383505f3e62faa9f549bb23e8a9848b78a968e@%3Ccommits.ws.apache.org%3E","https://lists.apache.org/thread.html/r4776f62dfae4a0006658542f43034a7fc199350e35a66d4e18164ee6@%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/r68d86f4b06c808204f62bcb254fcb5b0432528ee8d37a07ef4bc8222@%3Ccommits.ws.apache.org%3E","https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba@%3Cissues.maven.apache.org%3E","https://lists.apache.org/thread.html/rb8c0f1b7589864396690fe42a91a71dea9412e86eec66dc85bbacaaf@%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3@%3Ctorque-dev.db.apache.org%3E","https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a@%3Ctorque-dev.db.apache.org%3E","https://lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604@%3Ctorque-dev.db.apache.org%3E","https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-1015415","https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748@%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/rfc27e2727a20a574f39273e0432aa97486a332f9b3068f6ac1346594@%3Cdev.myfaces.apache.org%3E","https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E","https://lists.apache.org/thread.html/r037fed1d0ebde50c9caf8d99815db3093c344c3f651c5a49a09824ce@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r07ed3e4417ad043a27bee7bb33322e9bfc7d7e6d1719b8e3dfd95c14@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r161b87f8037bbaff400194a63cd2016c9a69f5949f06dcc79beeab54@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r2fe45d96eea8434b91592ca08109118f6308d60f6d0e21d52438cfb4@%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r6874dfe26eefc41b7c9a5e4a0487846fc4accf8c78ff948b24a1104a@%3Cdev.drill.apache.org%3E","https://www.oracle.com/security-alerts/cpuApr2021.html","https://lists.apache.org/thread.html/r007add131977f4f576c232b25e024249a3d16f66aad14a4b52819d21@%3Ccommon-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r294be9d31c0312d2c0837087204b5d4bf49d0552890e6eec716fa6a6@%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r3dd8881de891598d622227e9840dd7c2ef1d08abbb49e9690c7ae1bc@%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/r49549a8322f62cd3acfa4490d25bfba0be04f3f9ff4d14fe36199d27@%3Cyarn-dev.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r58a8775205ab1839dba43054b09a9ab3b25b423a4170b2413c4067ac@%3Ccommon-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r5b3d93dfdfb7708e796e8762ab40edbde8ff8add48aba53e5ea26f44@%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/r5d61b98ceb7bba939a651de5900dbd67be3817db6bfcc41c6e04e199@%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r79e47ed555bdb1180e528420a7a2bb898541367a29a3bc6bbf0baf2c@%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/r7b0e81d8367264d6cad98766a469d64d11248eb654417809bfdacf09@%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/ra7ab308481ee729f998691e8e3e02e93b1dedfc98f6b1cd3d86923b3@%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/rb2364f4cf4d274eab5a7ecfaf64bf575cedf8b0173551997c749d322@%3Cgitbox.hive.apache.org%3E","https://lists.apache.org/thread.html/rc607bc52f3507b8b9c28c6a747c3122f51ac24afe80af2a670785b97@%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/rcafc3a637d82bdc9a24036b2ddcad1e519dd0e6f848fcc3d606fd78f@%3Cdev.hive.apache.org%3E","https://lists.apache.org/thread.html/rd2704306ec729ccac726e50339b8a8f079515cc29ccb77713b16e7c5@%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/re120f6b3d2f8222121080342c5801fdafca2f5188ceeb3b49c8a1d27@%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/reebbd63c25bc1a946caa419cec2be78079f8449d1af48e52d47c9e85@%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/rf00b688ffa620c990597f829ff85fdbba8bf73ee7bfb34783e1f0d4e@%3Cyarn-dev.hadoop.apache.org%3E","https://lists.apache.org/thread.html/rf9f0fa84b8ae1a285f0210bafec6de2a9eba083007d04640b82aa625@%3Cissues.geode.apache.org%3E","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://lists.apache.org/thread.html/rd7e12d56d49d73e2b8549694974b07561b79b05455f7f781954231bf@%3Cdev.pig.apache.org%3E","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://lists.apache.org/thread.html/r007add131977f4f576c232b25e024249a3d16f66aad14a4b52819d21%40%3Ccommon-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r07ed3e4417ad043a27bee7bb33322e9bfc7d7e6d1719b8e3dfd95c14%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r161b87f8037bbaff400194a63cd2016c9a69f5949f06dcc79beeab54%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r215b3d50f56faeb2f9383505f3e62faa9f549bb23e8a9848b78a968e%40%3Ccommits.ws.apache.org%3E","https://lists.apache.org/thread.html/r294be9d31c0312d2c0837087204b5d4bf49d0552890e6eec716fa6a6%40%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r2fe45d96eea8434b91592ca08109118f6308d60f6d0e21d52438cfb4%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748%40%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/r3dd8881de891598d622227e9840dd7c2ef1d08abbb49e9690c7ae1bc%40%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/r4776f62dfae4a0006658542f43034a7fc199350e35a66d4e18164ee6%40%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/r49549a8322f62cd3acfa4490d25bfba0be04f3f9ff4d14fe36199d27%40%3Cyarn-dev.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r58a8775205ab1839dba43054b09a9ab3b25b423a4170b2413c4067ac%40%3Ccommon-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r5b3d93dfdfb7708e796e8762ab40edbde8ff8add48aba53e5ea26f44%40%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/r5d61b98ceb7bba939a651de5900dbd67be3817db6bfcc41c6e04e199%40%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r6874dfe26eefc41b7c9a5e4a0487846fc4accf8c78ff948b24a1104a%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r68d86f4b06c808204f62bcb254fcb5b0432528ee8d37a07ef4bc8222%40%3Ccommits.ws.apache.org%3E","https://lists.apache.org/thread.html/r79e47ed555bdb1180e528420a7a2bb898541367a29a3bc6bbf0baf2c%40%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/r7b0e81d8367264d6cad98766a469d64d11248eb654417809bfdacf09%40%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba%40%3Cissues.maven.apache.org%3E","https://lists.apache.org/thread.html/ra7ab308481ee729f998691e8e3e02e93b1dedfc98f6b1cd3d86923b3%40%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/rb2364f4cf4d274eab5a7ecfaf64bf575cedf8b0173551997c749d322%40%3Cgitbox.hive.apache.org%3E","https://lists.apache.org/thread.html/rb8c0f1b7589864396690fe42a91a71dea9412e86eec66dc85bbacaaf%40%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3%40%3Ctorque-dev.db.apache.org%3E","https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a%40%3Ctorque-dev.db.apache.org%3E","https://lists.apache.org/thread.html/rc607bc52f3507b8b9c28c6a747c3122f51ac24afe80af2a670785b97%40%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/rcafc3a637d82bdc9a24036b2ddcad1e519dd0e6f848fcc3d606fd78f%40%3Cdev.hive.apache.org%3E","https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95%40%3Cgithub.arrow.apache.org%3E","https://lists.apache.org/thread.html/rd2704306ec729ccac726e50339b8a8f079515cc29ccb77713b16e7c5%40%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604%40%3Ctorque-dev.db.apache.org%3E","https://lists.apache.org/thread.html/rd7e12d56d49d73e2b8549694974b07561b79b05455f7f781954231bf%40%3Cdev.pig.apache.org%3E","https://lists.apache.org/thread.html/re120f6b3d2f8222121080342c5801fdafca2f5188ceeb3b49c8a1d27%40%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/reebbd63c25bc1a946caa419cec2be78079f8449d1af48e52d47c9e85%40%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/rf00b688ffa620c990597f829ff85fdbba8bf73ee7bfb34783e1f0d4e%40%3Cyarn-dev.hadoop.apache.org%3E","https://lists.apache.org/thread.html/rf9f0fa84b8ae1a285f0210bafec6de2a9eba083007d04640b82aa625%40%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/rfc27e2727a20a574f39273e0432aa97486a332f9b3068f6ac1346594%40%3Cdev.myfaces.apache.org%3E","https://github.com/google/guava/issues/4011#issuecomment-1578991974","https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284","https://security.netapp.com/advisory/ntap-20220210-0003"],"severity":"Low","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5mg8-w23w-74h3","description":"Information Disclosure in Guava"},"relatedVulnerabilities":[{"id":"CVE-2020-8908","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8908","cwe":"CWE-378","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2020-8908","cwe":"CWE-732","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8908","date":"2026-10-08","epss":0.00924,"percentile":0.59197}],"urls":["https://github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40","https://github.com/google/guava/issues/4011","https://lists.apache.org/thread.html/r007add131977f4f576c232b25e024249a3d16f66aad14a4b52819d21%40%3Ccommon-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r07ed3e4417ad043a27bee7bb33322e9bfc7d7e6d1719b8e3dfd95c14%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r161b87f8037bbaff400194a63cd2016c9a69f5949f06dcc79beeab54%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r215b3d50f56faeb2f9383505f3e62faa9f549bb23e8a9848b78a968e%40%3Ccommits.ws.apache.org%3E","https://lists.apache.org/thread.html/r294be9d31c0312d2c0837087204b5d4bf49d0552890e6eec716fa6a6%40%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r2fe45d96eea8434b91592ca08109118f6308d60f6d0e21d52438cfb4%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748%40%3Ccommits.pulsar.apache.org%3E","https://lists.apache.org/thread.html/r3dd8881de891598d622227e9840dd7c2ef1d08abbb49e9690c7ae1bc%40%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/r4776f62dfae4a0006658542f43034a7fc199350e35a66d4e18164ee6%40%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/r49549a8322f62cd3acfa4490d25bfba0be04f3f9ff4d14fe36199d27%40%3Cyarn-dev.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r58a8775205ab1839dba43054b09a9ab3b25b423a4170b2413c4067ac%40%3Ccommon-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r5b3d93dfdfb7708e796e8762ab40edbde8ff8add48aba53e5ea26f44%40%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/r5d61b98ceb7bba939a651de5900dbd67be3817db6bfcc41c6e04e199%40%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r6874dfe26eefc41b7c9a5e4a0487846fc4accf8c78ff948b24a1104a%40%3Cdev.drill.apache.org%3E","https://lists.apache.org/thread.html/r68d86f4b06c808204f62bcb254fcb5b0432528ee8d37a07ef4bc8222%40%3Ccommits.ws.apache.org%3E","https://lists.apache.org/thread.html/r79e47ed555bdb1180e528420a7a2bb898541367a29a3bc6bbf0baf2c%40%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/r7b0e81d8367264d6cad98766a469d64d11248eb654417809bfdacf09%40%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba%40%3Cissues.maven.apache.org%3E","https://lists.apache.org/thread.html/ra7ab308481ee729f998691e8e3e02e93b1dedfc98f6b1cd3d86923b3%40%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/rb2364f4cf4d274eab5a7ecfaf64bf575cedf8b0173551997c749d322%40%3Cgitbox.hive.apache.org%3E","https://lists.apache.org/thread.html/rb8c0f1b7589864396690fe42a91a71dea9412e86eec66dc85bbacaaf%40%3Ccommits.cxf.apache.org%3E","https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3%40%3Ctorque-dev.db.apache.org%3E","https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a%40%3Ctorque-dev.db.apache.org%3E","https://lists.apache.org/thread.html/rc607bc52f3507b8b9c28c6a747c3122f51ac24afe80af2a670785b97%40%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/rcafc3a637d82bdc9a24036b2ddcad1e519dd0e6f848fcc3d606fd78f%40%3Cdev.hive.apache.org%3E","https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95%40%3Cgithub.arrow.apache.org%3E","https://lists.apache.org/thread.html/rd2704306ec729ccac726e50339b8a8f079515cc29ccb77713b16e7c5%40%3Cissues.hive.apache.org%3E","https://lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604%40%3Ctorque-dev.db.apache.org%3E","https://lists.apache.org/thread.html/rd7e12d56d49d73e2b8549694974b07561b79b05455f7f781954231bf%40%3Cdev.pig.apache.org%3E","https://lists.apache.org/thread.html/re120f6b3d2f8222121080342c5801fdafca2f5188ceeb3b49c8a1d27%40%3Cyarn-issues.hadoop.apache.org%3E","https://lists.apache.org/thread.html/reebbd63c25bc1a946caa419cec2be78079f8449d1af48e52d47c9e85%40%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/rf00b688ffa620c990597f829ff85fdbba8bf73ee7bfb34783e1f0d4e%40%3Cyarn-dev.hadoop.apache.org%3E","https://lists.apache.org/thread.html/rf9f0fa84b8ae1a285f0210bafec6de2a9eba083007d04640b82aa625%40%3Cissues.geode.apache.org%3E","https://lists.apache.org/thread.html/rfc27e2727a20a574f39273e0432aa97486a332f9b3068f6ac1346594%40%3Cdev.myfaces.apache.org%3E","https://security.netapp.com/advisory/ntap-20220210-0003/","https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-1015415","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-8908","description":"A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the created directory is world-readable (readable by an attacker with access to the system). The method in question has been marked @Deprecated in versions 30.0 and later and should not be used. For Android developers, we recommend choosing a temporary directory API provided by Android, such as context.getCacheDir(). For other Java developers, we recommend migrating to the Java 7 API java.nio.file.Files.createTempDirectory() which explicitly configures permissions of 700, or configuring the Java runtime's java.io.tmpdir system property to point to a location whose permissions are appropriately configured."}]},{"artifact":{"id":"c9a07c3b9df49ddb","cpes":["cpe:2.3:a:libglib2.0-0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0-0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0_0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0-0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*","cpe:2.3:a:libglib2.0:libglib2.0_0:2.64.6-1\\~ubuntu20.04.6:*:*:*:*:*:*:*"],"name":"libglib2.0-0","purl":"pkg:deb/ubuntu/libglib2.0-0@2.64.6-1~ubuntu20.04.6?arch=amd64&distro=ubuntu-20.04&upstream=glib2.0","type":"deb","version":"2.64.6-1~ubuntu20.04.6","language":"","licenses":["sha256:f65e92234e97932114d94d72fc898fcddc854345f77caae80af26ad5cd94cce8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libglib2.0-0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libglib2.0-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libglib2.0-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glib2.0"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-14512","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glib2.0","version":"2.64.6-1~ubuntu20.04.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-14512","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-14512","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-14512","date":"2026-10-08","epss":0.00579,"percentile":0.45914}],"risk":0.2895,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-14512"},"relatedVulnerabilities":[{"id":"CVE-2025-14512","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-14512","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-14512","date":"2026-10-08","epss":0.00579,"percentile":0.45914}],"urls":["https://access.redhat.com/errata/RHSA-2026:15953","https://access.redhat.com/errata/RHSA-2026:15969","https://access.redhat.com/errata/RHSA-2026:15971","https://access.redhat.com/errata/RHSA-2026:19148","https://access.redhat.com/errata/RHSA-2026:19361","https://access.redhat.com/errata/RHSA-2026:19452","https://access.redhat.com/errata/RHSA-2026:19457","https://access.redhat.com/errata/RHSA-2026:19459","https://access.redhat.com/errata/RHSA-2026:19460","https://access.redhat.com/errata/RHSA-2026:19523","https://access.redhat.com/errata/RHSA-2026:19524","https://access.redhat.com/errata/RHSA-2026:19565","https://access.redhat.com/errata/RHSA-2026:19567","https://access.redhat.com/errata/RHSA-2026:21275","https://access.redhat.com/errata/RHSA-2026:22634","https://access.redhat.com/errata/RHSA-2026:25096","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:7461","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2025-14512","https://bugzilla.redhat.com/show_bug.cgi?id=2421339","https://gitlab.gnome.org/GNOME/glib/-/issues/3845"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-14512","description":"A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values."}]},{"artifact":{"id":"3640cf00fde88f22","cpes":["cpe:2.3:a:binutils:binutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-1149","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1149","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1149","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1149","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1149","date":"2026-10-08","epss":0.00576,"percentile":0.45752}],"risk":0.28800000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1149"},"relatedVulnerabilities":[{"id":"CVE-2025-1149","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1149","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1149","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1149","date":"2026-10-08","epss":0.00576,"percentile":0.45752}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295053","https://vuldb.com/?id.295053","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1149","description":"A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup of the file libiberty/xmalloc.c of the component ld. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"197555b9cdbc0e71","cpes":["cpe:2.3:a:binutils-common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-common:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_common:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-common","purl":"pkg:deb/ubuntu/binutils-common@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1149","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1149","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1149","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1149","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1149","date":"2026-10-08","epss":0.00576,"percentile":0.45752}],"risk":0.28800000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1149"},"relatedVulnerabilities":[{"id":"CVE-2025-1149","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1149","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1149","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1149","date":"2026-10-08","epss":0.00576,"percentile":0.45752}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295053","https://vuldb.com/?id.295053","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1149","description":"A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup of the file libiberty/xmalloc.c of the component ld. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"436f5c90439c5365","cpes":["cpe:2.3:a:binutils-x86-64-linux-gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux-gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-x86-64-linux-gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_x86_64_linux_gnu:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"binutils-x86-64-linux-gnu","purl":"pkg:deb/ubuntu/binutils-x86-64-linux-gnu@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/binutils-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list"}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1149","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1149","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1149","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1149","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1149","date":"2026-10-08","epss":0.00576,"percentile":0.45752}],"risk":0.28800000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1149"},"relatedVulnerabilities":[{"id":"CVE-2025-1149","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1149","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1149","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1149","date":"2026-10-08","epss":0.00576,"percentile":0.45752}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295053","https://vuldb.com/?id.295053","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1149","description":"A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup of the file libiberty/xmalloc.c of the component ld. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"e8585c2fc66c583c","cpes":["cpe:2.3:a:libbinutils:libbinutils:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libbinutils","purl":"pkg:deb/ubuntu/libbinutils@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libbinutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1149","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1149","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1149","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1149","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1149","date":"2026-10-08","epss":0.00576,"percentile":0.45752}],"risk":0.28800000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1149"},"relatedVulnerabilities":[{"id":"CVE-2025-1149","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1149","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1149","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1149","date":"2026-10-08","epss":0.00576,"percentile":0.45752}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295053","https://vuldb.com/?id.295053","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1149","description":"A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup of the file libiberty/xmalloc.c of the component ld. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"e9c23578b20f9960","cpes":["cpe:2.3:a:libctf-nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf-nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf-nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf_nobfd0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf-nobfd0","purl":"pkg:deb/ubuntu/libctf-nobfd0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libctf-nobfd0/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf-nobfd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1149","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1149","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1149","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1149","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1149","date":"2026-10-08","epss":0.00576,"percentile":0.45752}],"risk":0.28800000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1149"},"relatedVulnerabilities":[{"id":"CVE-2025-1149","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1149","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1149","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1149","date":"2026-10-08","epss":0.00576,"percentile":0.45752}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295053","https://vuldb.com/?id.295053","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1149","description":"A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup of the file libiberty/xmalloc.c of the component ld. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"5a72139b32f71a25","cpes":["cpe:2.3:a:libctf0:libctf0:2.34-6ubuntu1.7:*:*:*:*:*:*:*"],"name":"libctf0","purl":"pkg:deb/ubuntu/libctf0@2.34-6ubuntu1.7?arch=amd64&distro=ubuntu-20.04&upstream=binutils","type":"deb","version":"2.34-6ubuntu1.7","language":"","licenses":["sha256:677c595f0afa160e1021627e7dcdcd1eb1741963b58d6cdf706eb3bacf9a9297"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libctf0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf0:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libctf0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-1149","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"binutils","version":"2.34-6ubuntu1.7"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-1149","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1149","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1149","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1149","date":"2026-10-08","epss":0.00576,"percentile":0.45752}],"risk":0.28800000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1149"},"relatedVulnerabilities":[{"id":"CVE-2025-1149","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1149","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1149","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2025-1149","date":"2026-10-08","epss":0.00576,"percentile":0.45752}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295053","https://vuldb.com/?id.295053","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1149","description":"A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup of the file libiberty/xmalloc.c of the component ld. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"0e0610706379d375","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/ubuntu/libc-bin@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20796","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-20796","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-10-08","epss":0.05757,"percentile":0.9288}],"risk":0.28785000000000005,"urls":[],"severity":"Negligible","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-20796"},"relatedVulnerabilities":[{"id":"CVE-2018-20796","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-10-08","epss":0.05757,"percentile":0.9288}],"urls":["http://www.securityfocus.com/bid/107160","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141","https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html","https://security.netapp.com/advisory/ntap-20190315-0002/","https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20796","description":"In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep."}]},{"artifact":{"id":"833e05234b1880bd","cpes":["cpe:2.3:a:libc6:libc6:2.31-0ubuntu9.9:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/ubuntu/libc6@2.31-0ubuntu9.9?arch=amd64&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.9","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20796","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-20796","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-10-08","epss":0.05757,"percentile":0.9288}],"risk":0.28785000000000005,"urls":[],"severity":"Negligible","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-20796"},"relatedVulnerabilities":[{"id":"CVE-2018-20796","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-10-08","epss":0.05757,"percentile":0.9288}],"urls":["http://www.securityfocus.com/bid/107160","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141","https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html","https://security.netapp.com/advisory/ntap-20190315-0002/","https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20796","description":"In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep."}]},{"artifact":{"id":"b082b70df3e54e06","cpes":["cpe:2.3:a:locales:locales:2.31-0ubuntu9.14:*:*:*:*:*:*:*"],"name":"locales","purl":"pkg:deb/ubuntu/locales@2.31-0ubuntu9.14?arch=all&distro=ubuntu-20.04&upstream=glibc","type":"deb","version":"2.31-0ubuntu9.14","language":"","licenses":["sha256:40c7e1f2118531f038ca22999bd976901254e1bc5cd1b0f0211bdd064c599987"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/locales/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/locales/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/locales.config","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.config"},{"path":"/var/lib/dpkg/info/locales.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.list"},{"path":"/var/lib/dpkg/info/locales.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postinst"},{"path":"/var/lib/dpkg/info/locales.postrm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.postrm"},{"path":"/var/lib/dpkg/info/locales.prerm","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.prerm"},{"path":"/var/lib/dpkg/info/locales.templates","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/locales.templates"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20796","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"glibc","version":"2.31-0ubuntu9.14"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2018-20796","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-10-08","epss":0.05757,"percentile":0.9288}],"risk":0.28785000000000005,"urls":[],"severity":"Negligible","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2018-20796"},"relatedVulnerabilities":[{"id":"CVE-2018-20796","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-10-08","epss":0.05757,"percentile":0.9288}],"urls":["http://www.securityfocus.com/bid/107160","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141","https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html","https://security.netapp.com/advisory/ntap-20190315-0002/","https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20796","description":"In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-18692","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-18692","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-18692","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-18692","date":"2026-10-08","epss":0.00575,"percentile":0.45733}],"risk":0.2875,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-18692"},"relatedVulnerabilities":[{"id":"CVE-2026-18692","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18692","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-18692","date":"2026-10-08","epss":0.00575,"percentile":0.45733}],"urls":["https://jira.mongodb.org/browse/SERVER-129887"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18692","description":"An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution of unintended code."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-18692","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-18692","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-18692","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-18692","date":"2026-10-08","epss":0.00575,"percentile":0.45733}],"risk":0.2875,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-18692"},"relatedVulnerabilities":[{"id":"CVE-2026-18692","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18692","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-18692","date":"2026-10-08","epss":0.00575,"percentile":0.45733}],"urls":["https://jira.mongodb.org/browse/SERVER-129887"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18692","description":"An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution of unintended code."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-18692","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-18692","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-18692","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-18692","date":"2026-10-08","epss":0.00575,"percentile":0.45733}],"risk":0.2875,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-18692"},"relatedVulnerabilities":[{"id":"CVE-2026-18692","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18692","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-18692","date":"2026-10-08","epss":0.00575,"percentile":0.45733}],"urls":["https://jira.mongodb.org/browse/SERVER-129887"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18692","description":"An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution of unintended code."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-69421","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-69421","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-69421","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69421","date":"2026-10-08","epss":0.00958,"percentile":0.60302}],"risk":0.2874,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-69421"},"relatedVulnerabilities":[{"id":"CVE-2025-69421","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69421","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69421","date":"2026-10-08","epss":0.00958,"percentile":0.60302}],"urls":["https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b","https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7","https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd","https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3","https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69421","description":"Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-69421","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-69421","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-69421","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69421","date":"2026-10-08","epss":0.00958,"percentile":0.60302}],"risk":0.2874,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-69421"},"relatedVulnerabilities":[{"id":"CVE-2025-69421","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69421","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69421","date":"2026-10-08","epss":0.00958,"percentile":0.60302}],"urls":["https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b","https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7","https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd","https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3","https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69421","description":"Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer\ndereference in the PKCS12_item_decrypt_d2i_ex() function.\n\nImpact summary: A NULL pointer dereference can trigger a crash which leads to\nDenial of Service for an application processing PKCS#12 files.\n\nThe PKCS12_item_decrypt_d2i_ex() function does not check whether the oct\nparameter is NULL before dereferencing it. When called from\nPKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can\nbe NULL, causing a crash. The vulnerability is limited to Denial of Service\nand cannot be escalated to achieve code execution or memory disclosure.\n\nExploiting this issue requires an attacker to provide a malformed PKCS#12 file\nto an application that processes it. For that reason the issue was assessed as\nLow severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS#12 implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-50059","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-50059","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-50059","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-50059","date":"2026-10-08","epss":0.00573,"percentile":0.456}],"risk":0.2865,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-50059"},"relatedVulnerabilities":[{"id":"CVE-2025-50059","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":8.6,"impactScore":4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-50059","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-50059","date":"2026-10-08","epss":0.00573,"percentile":0.456}],"urls":["https://www.oracle.com/security-alerts/cpujul2025.html","https://lists.debian.org/debian-lts-announce/2025/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2025/08/msg00014.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-50059","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)."}]},{"artifact":{"id":"90f01f5eff81b5a4","cpes":["cpe:2.3:a:libncurses6:libncurses6:6.2-0ubuntu2.1:*:*:*:*:*:*:*"],"name":"libncurses6","purl":"pkg:deb/ubuntu/libncurses6@6.2-0ubuntu2.1?arch=amd64&distro=ubuntu-20.04&upstream=ncurses","type":"deb","version":"6.2-0ubuntu2.1","language":"","licenses":["sha256:dced00c014dbe91a9179d6d92497d04c225c613cab85ba704aaa987369eadae3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtinfo6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libncurses6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libncurses6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libncurses6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"ncurses","version":"6.2-0ubuntu2.1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"risk":0.2862,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-50495"},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"e32f4840d075659e","cpes":["cpe:2.3:a:libncursesw6:libncursesw6:6.2-0ubuntu2.1:*:*:*:*:*:*:*"],"name":"libncursesw6","purl":"pkg:deb/ubuntu/libncursesw6@6.2-0ubuntu2.1?arch=amd64&distro=ubuntu-20.04&upstream=ncurses","type":"deb","version":"6.2-0ubuntu2.1","language":"","licenses":["sha256:dced00c014dbe91a9179d6d92497d04c225c613cab85ba704aaa987369eadae3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtinfo6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libncursesw6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libncursesw6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libncursesw6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"ncurses","version":"6.2-0ubuntu2.1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"risk":0.2862,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-50495"},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"c0e8162ddfa39d24","cpes":["cpe:2.3:a:libtinfo6:libtinfo6:6.2-0ubuntu2.1:*:*:*:*:*:*:*"],"name":"libtinfo6","purl":"pkg:deb/ubuntu/libtinfo6@6.2-0ubuntu2.1?arch=amd64&distro=ubuntu-20.04&upstream=ncurses","type":"deb","version":"6.2-0ubuntu2.1","language":"","licenses":["sha256:dced00c014dbe91a9179d6d92497d04c225c613cab85ba704aaa987369eadae3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtinfo6/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libtinfo6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtinfo6:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libtinfo6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"ncurses","version":"6.2-0ubuntu2.1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"risk":0.2862,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-50495"},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"d216f520e408f718","cpes":["cpe:2.3:a:ncurses-base:ncurses-base:6.2-0ubuntu2.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses-base:ncurses_base:6.2-0ubuntu2.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_base:ncurses-base:6.2-0ubuntu2.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_base:ncurses_base:6.2-0ubuntu2.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses-base:6.2-0ubuntu2.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses_base:6.2-0ubuntu2.1:*:*:*:*:*:*:*"],"name":"ncurses-base","purl":"pkg:deb/ubuntu/ncurses-base@6.2-0ubuntu2.1?arch=all&distro=ubuntu-20.04&upstream=ncurses","type":"deb","version":"6.2-0ubuntu2.1","language":"","licenses":["sha256:dced00c014dbe91a9179d6d92497d04c225c613cab85ba704aaa987369eadae3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/ncurses-base/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/ncurses-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-base.conffiles","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/ncurses-base.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-base.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/ncurses-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-base.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/ncurses-base.list"}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"ncurses","version":"6.2-0ubuntu2.1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"risk":0.2862,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-50495"},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"84cc756d53f210c6","cpes":["cpe:2.3:a:ncurses-bin:ncurses-bin:6.2-0ubuntu2.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses-bin:ncurses_bin:6.2-0ubuntu2.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_bin:ncurses-bin:6.2-0ubuntu2.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_bin:ncurses_bin:6.2-0ubuntu2.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses-bin:6.2-0ubuntu2.1:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses_bin:6.2-0ubuntu2.1:*:*:*:*:*:*:*"],"name":"ncurses-bin","purl":"pkg:deb/ubuntu/ncurses-bin@6.2-0ubuntu2.1?arch=amd64&distro=ubuntu-20.04&upstream=ncurses","type":"deb","version":"6.2-0ubuntu2.1","language":"","licenses":["sha256:dced00c014dbe91a9179d6d92497d04c225c613cab85ba704aaa987369eadae3"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/ncurses-bin/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/ncurses-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-bin.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/ncurses-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/ncurses-bin.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/ncurses-bin.list"}],"upstreams":[{"name":"ncurses"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50495","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"ncurses","version":"6.2-0ubuntu2.1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2023-50495","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"risk":0.2862,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2023-50495"},"relatedVulnerabilities":[{"id":"CVE-2023-50495","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-50495","date":"2026-10-08","epss":0.00954,"percentile":0.60184}],"urls":["https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html","https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html","https://security.netapp.com/advisory/ntap-20240119-0008/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50495","description":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42011","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-42011","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-42011","cwe":"CWE-295","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-42011","date":"2026-10-08","epss":0.0057,"percentile":0.45419}],"risk":0.28500000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42011"},"relatedVulnerabilities":[{"id":"CVE-2026-42011","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42011","cwe":"CWE-295","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-42011","date":"2026-10-08","epss":0.0057,"percentile":0.45419}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-42011","https://bugzilla.redhat.com/show_bug.cgi?id=2467437","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42011","description":"A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-9748","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-9748","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-9748","cwe":"CWE-617","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-9748","date":"2026-10-08","epss":0.00566,"percentile":0.45219}],"risk":0.28300000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-9748"},"relatedVulnerabilities":[{"id":"CVE-2026-9748","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9748","cwe":"CWE-617","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-9748","date":"2026-10-08","epss":0.00566,"percentile":0.45219}],"urls":["https://jira.mongodb.org/browse/SERVER-123951"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9748","description":"The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal \"skip this document\" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechanism, but rather a TeeBuffer-internal signal used solely by $facet to coordinate its sub-pipelines. When this stage is placed before $facet in a pipeline, TeeBuffer receives the unexpected PauseExecution from upstream and hits a hard invariant assertion, crashing mongod."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-9750","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-9750","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-9750","cwe":"CWE-617","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-9750","date":"2026-10-08","epss":0.00566,"percentile":0.45219}],"risk":0.28300000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-9750"},"relatedVulnerabilities":[{"id":"CVE-2026-9750","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9750","cwe":"CWE-617","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-9750","date":"2026-10-08","epss":0.00566,"percentile":0.45219}],"urls":["https://jira.mongodb.org/browse/SERVER-123633"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9750","description":"An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-9748","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-9748","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-9748","cwe":"CWE-617","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-9748","date":"2026-10-08","epss":0.00566,"percentile":0.45219}],"risk":0.28300000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-9748"},"relatedVulnerabilities":[{"id":"CVE-2026-9748","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9748","cwe":"CWE-617","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-9748","date":"2026-10-08","epss":0.00566,"percentile":0.45219}],"urls":["https://jira.mongodb.org/browse/SERVER-123951"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9748","description":"The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal \"skip this document\" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechanism, but rather a TeeBuffer-internal signal used solely by $facet to coordinate its sub-pipelines. When this stage is placed before $facet in a pipeline, TeeBuffer receives the unexpected PauseExecution from upstream and hits a hard invariant assertion, crashing mongod."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-9750","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-9750","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-9750","cwe":"CWE-617","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-9750","date":"2026-10-08","epss":0.00566,"percentile":0.45219}],"risk":0.28300000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-9750"},"relatedVulnerabilities":[{"id":"CVE-2026-9750","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9750","cwe":"CWE-617","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-9750","date":"2026-10-08","epss":0.00566,"percentile":0.45219}],"urls":["https://jira.mongodb.org/browse/SERVER-123633"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9750","description":"An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-9748","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-9748","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-9748","cwe":"CWE-617","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-9748","date":"2026-10-08","epss":0.00566,"percentile":0.45219}],"risk":0.28300000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-9748"},"relatedVulnerabilities":[{"id":"CVE-2026-9748","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9748","cwe":"CWE-617","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-9748","date":"2026-10-08","epss":0.00566,"percentile":0.45219}],"urls":["https://jira.mongodb.org/browse/SERVER-123951"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9748","description":"The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal \"skip this document\" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechanism, but rather a TeeBuffer-internal signal used solely by $facet to coordinate its sub-pipelines. When this stage is placed before $facet in a pipeline, TeeBuffer receives the unexpected PauseExecution from upstream and hits a hard invariant assertion, crashing mongod."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-9750","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-9750","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-9750","cwe":"CWE-617","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-9750","date":"2026-10-08","epss":0.00566,"percentile":0.45219}],"risk":0.28300000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-9750"},"relatedVulnerabilities":[{"id":"CVE-2026-9750","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9750","cwe":"CWE-617","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-9750","date":"2026-10-08","epss":0.00566,"percentile":0.45219}],"urls":["https://jira.mongodb.org/browse/SERVER-123633"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9750","description":"An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-28387","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-28387","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-08","epss":0.00943,"percentile":0.59839}],"risk":0.28289999999999993,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-28387"},"relatedVulnerabilities":[{"id":"CVE-2026-28387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-08","epss":0.00943,"percentile":0.59839}],"urls":["https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b","https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe","https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3","https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7","https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28387","description":"Issue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages.  These SMTP (or other similar) clients are not vulnerable\nto this issue.  Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-28387","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-28387","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-08","epss":0.00943,"percentile":0.59839}],"risk":0.28289999999999993,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-28387"},"relatedVulnerabilities":[{"id":"CVE-2026-28387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-28387","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-28387","date":"2026-10-08","epss":0.00943,"percentile":0.59839}],"urls":["https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b","https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe","https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3","https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7","https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177","https://openssl-library.org/news/secadv/20260407.txt","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-28387","description":"Issue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages.  These SMTP (or other similar) clients are not vulnerable\nto this issue.  Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary."}]},{"artifact":{"id":"fd6ba8236976331d","cpes":["cpe:2.3:a:gzip:gzip:1.10-0ubuntu4.1:*:*:*:*:*:*:*"],"name":"gzip","purl":"pkg:deb/ubuntu/gzip@1.10-0ubuntu4.1?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.10-0ubuntu4.1","language":"","licenses":["sha256:f9ac4a5d7a670e3891881a2cdba5fa2cd625c4d58eae4a7aa372ac00a06803bd"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gzip/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/gzip/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gzip.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/gzip.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gzip.list","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/gzip.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-41992","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gzip","version":"1.10-0ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-41992","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-41992","cwe":"CWE-126","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-41992","date":"2026-10-08","epss":0.00564,"percentile":0.4513}],"risk":0.28200000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-41992"},"relatedVulnerabilities":[{"id":"CVE-2026-41992","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-41992","cwe":"CWE-126","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-41992","date":"2026-10-08","epss":0.00564,"percentile":0.4513}],"urls":["https://cert.pl/en/posts/2026/04/CVE-2026-41991/","https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=63dbf6b3b9e6e781df1a6a64e609b10e23969681","https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=e7378c2d421be6a286922374425680bbe9ad8b7d","https://www.gnu.org/software/gzip/","http://www.openwall.com/lists/oss-security/2026/08/23/1","http://www.openwall.com/lists/oss-security/2026/08/25/1","http://www.openwall.com/lists/oss-security/2026/08/27/2"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-41992","description":"GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation.\nBy decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out‑of‑bounds read in the LZH decoder. The LZH decompression logic follows stale values left in the shared array, causing reads past the end of the allocated global buffer.\n\nThis issue has been fixed in commits 63dbf6b3b9e6e781df1a6a64e609b10e23969681 and e7378c2d421be6a286922374425680bbe9ad8b7d."}]},{"artifact":{"id":"6f3c8b33487d1a59","cpes":["cpe:2.3:a:libgnutls30:libgnutls30:3.6.13-2ubuntu1.8:*:*:*:*:*:*:*"],"name":"libgnutls30","purl":"pkg:deb/ubuntu/libgnutls30@3.6.13-2ubuntu1.8?arch=amd64&distro=ubuntu-20.04&upstream=gnutls28","type":"deb","version":"3.6.13-2ubuntu1.8","language":"","licenses":["sha256:15fad95b786ca4e9843c4319716325b58886e617fb88992ff894334b6e7c3e71"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30/copyright","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/usr/share/doc/libgnutls30/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","layerID":"sha256:e5c44df765e6701ffe25b1731b9b8267dba3e29589fdb472e91f84e80abc646d","accessPath":"/var/lib/dpkg/info/libgnutls30:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-42013","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"gnutls28","version":"3.6.13-2ubuntu1.8"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-42013","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-42013","cwe":"CWE-295","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-42013","date":"2026-10-08","epss":0.00564,"percentile":0.45129}],"risk":0.28200000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-42013"},"relatedVulnerabilities":[{"id":"CVE-2026-42013","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42013","cwe":"CWE-295","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-42013","date":"2026-10-08","epss":0.00564,"percentile":0.45129}],"urls":["https://access.redhat.com/errata/RHSA-2026:13274","https://access.redhat.com/errata/RHSA-2026:20611","https://access.redhat.com/errata/RHSA-2026:20612","https://access.redhat.com/errata/RHSA-2026:20613","https://access.redhat.com/errata/RHSA-2026:26319","https://access.redhat.com/errata/RHSA-2026:26409","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:30004","https://access.redhat.com/errata/RHSA-2026:30849","https://access.redhat.com/errata/RHSA-2026:30850","https://access.redhat.com/errata/RHSA-2026:32962","https://access.redhat.com/errata/RHSA-2026:33125","https://access.redhat.com/errata/RHSA-2026:40762","https://access.redhat.com/errata/RHSA-2026:41921","https://access.redhat.com/errata/RHSA-2026:43575","https://access.redhat.com/errata/RHSA-2026:56853","https://access.redhat.com/errata/RHSA-2026:57483","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:59831","https://access.redhat.com/errata/RHSA-2026:60019","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:74674","https://access.redhat.com/security/cve/CVE-2026-42013","https://bugzilla.redhat.com/show_bug.cgi?id=2467448","https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42013","description":"A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or man-in-the-middle attacks."}]},{"artifact":{"id":"42da88b6b6a23ef6","cpes":["cpe:2.3:a:libnss3:libnss3:2\\:3.49.1-1ubuntu1.9:*:*:*:*:*:*:*"],"name":"libnss3","purl":"pkg:deb/ubuntu/libnss3@2%3A3.49.1-1ubuntu1.9?arch=amd64&distro=ubuntu-20.04&upstream=nss","type":"deb","version":"2:3.49.1-1ubuntu1.9","language":"","licenses":["BSD-3","MIT","MPL-2.0","Zlib","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libnss3/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libnss3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libnss3:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libnss3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"nss"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-2781","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"nss","version":"2:3.49.1-1ubuntu1.9"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-2781","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-2781","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-2781","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-2781","date":"2026-10-08","epss":0.00559,"percentile":0.448}],"risk":0.2795,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-2781"},"relatedVulnerabilities":[{"id":"CVE-2026-2781","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-2781","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2026-2781","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-2781","date":"2026-10-08","epss":0.00559,"percentile":0.448}],"urls":["https://bugzilla.mozilla.org/show_bug.cgi?id=2009552","https://www.mozilla.org/security/advisories/mfsa2026-13/","https://www.mozilla.org/security/advisories/mfsa2026-15/","https://www.mozilla.org/security/advisories/mfsa2026-16/","https://www.mozilla.org/security/advisories/mfsa2026-17/","https://www.mozilla.org/security/advisories/mfsa2026-31/","https://lists.debian.org/debian-lts-announce/2026/03/msg00012.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-2781","description":"Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-10921","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-10921","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2024-10921","cwe":"CWE-158","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2024-10921","date":"2026-10-08","epss":0.00553,"percentile":0.44445}],"risk":0.2765,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-10921"},"relatedVulnerabilities":[{"id":"CVE-2024-10921","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-10921","cwe":"CWE-158","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2024-10921","date":"2026-10-08","epss":0.00553,"percentile":0.44445}],"urls":["https://jira.mongodb.org/browse/SERVER-96419"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-10921","description":"An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-10921","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-10921","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2024-10921","cwe":"CWE-158","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2024-10921","date":"2026-10-08","epss":0.00553,"percentile":0.44445}],"risk":0.2765,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-10921"},"relatedVulnerabilities":[{"id":"CVE-2024-10921","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-10921","cwe":"CWE-158","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2024-10921","date":"2026-10-08","epss":0.00553,"percentile":0.44445}],"urls":["https://jira.mongodb.org/browse/SERVER-96419"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-10921","description":"An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-10921","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2024-10921","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2024-10921","cwe":"CWE-158","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2024-10921","date":"2026-10-08","epss":0.00553,"percentile":0.44445}],"risk":0.2765,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2024-10921"},"relatedVulnerabilities":[{"id":"CVE-2024-10921","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-10921","cwe":"CWE-158","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2024-10921","date":"2026-10-08","epss":0.00553,"percentile":0.44445}],"urls":["https://jira.mongodb.org/browse/SERVER-96419"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-10921","description":"An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to 6.0.19, MongoDB Server v7.0 versions prior to 7.0.15 and MongoDB Server v8.0 versions prior to and including 8.0.2."}]},{"artifact":{"id":"e7531094aa31ce73","cpes":["cpe:2.3:a:org.springframework:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:org.springframework:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-expression:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring-expression:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_expression:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring_expression:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:springframework:spring_expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring-expression:5.3.22:*:*:*:*:*:*:*","cpe:2.3:a:spring:spring_expression:5.3.22:*:*:*:*:*:*:*"],"name":"spring-expression","purl":"pkg:maven/org.springframework/spring-expression@5.3.22","type":"java-archive","version":"5.3.22","language":"java","licenses":["Apache-2.0","BSD-3-Clause"],"metadata":{"pomGroupID":"org.springframework","virtualPath":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","manifestName":"","pomArtifactID":"spring-expression","archiveDigests":[{"value":"c056f9e9994b18c95deead695f9471952d1f21d1","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/spring-expression-5.3.22.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"5.3.39"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9cmq-m9j5-mvww","versionConstraint":"<5.3.39 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.springframework:spring-expression","version":"5.3.22"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-9cmq-m9j5-mvww","fix":{"state":"fixed","versions":["5.3.39"],"available":[{"date":"2024-08-21","kind":"first-observed","version":"5.3.39"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","metrics":{"baseScore":5.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38808","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38808","date":"2026-10-08","epss":0.00568,"percentile":0.45318}],"risk":0.27548,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2024-38808","https://spring.io/security/cve-2024-38808","https://github.com/spring-projects/spring-framework/commit/26f2dad388499faecf99e75b8856788e95d8d658","https://github.com/spring-projects/spring-framework/commit/f44d13cb7816e586b86c02421af4f5498391111c","https://security.netapp.com/advisory/ntap-20240920-0002"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9cmq-m9j5-mvww","description":"Spring Framework vulnerable to Denial of Service"},"relatedVulnerabilities":[{"id":"CVE-2024-38808","cvss":[{"type":"Secondary","source":"security@vmware.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-38808","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2024-38808","date":"2026-10-08","epss":0.00568,"percentile":0.45318}],"urls":["https://spring.io/security/cve-2024-38808","https://security.netapp.com/advisory/ntap-20240920-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-38808","description":"In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.\n\nSpecifically, an application is vulnerable when the following is true:\n\n  *  The application evaluates user-supplied SpEL expressions."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4148","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-4148","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-4148","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-4148","date":"2026-10-08","epss":0.0055,"percentile":0.44268}],"risk":0.27499999999999997,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-4148"},"relatedVulnerabilities":[{"id":"CVE-2026-4148","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4148","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-4148","date":"2026-10-08","epss":0.0055,"percentile":0.44268}],"urls":["https://jira.mongodb.org/browse/SERVER-119319"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4148","description":"A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4148","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-4148","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-4148","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-4148","date":"2026-10-08","epss":0.0055,"percentile":0.44268}],"risk":0.27499999999999997,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-4148"},"relatedVulnerabilities":[{"id":"CVE-2026-4148","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4148","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-4148","date":"2026-10-08","epss":0.0055,"percentile":0.44268}],"urls":["https://jira.mongodb.org/browse/SERVER-119319"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4148","description":"A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4148","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-4148","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-4148","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-4148","date":"2026-10-08","epss":0.0055,"percentile":0.44268}],"risk":0.27499999999999997,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-4148"},"relatedVulnerabilities":[{"id":"CVE-2026-4148","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4148","cwe":"CWE-416","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-4148","date":"2026-10-08","epss":0.0055,"percentile":0.44268}],"urls":["https://jira.mongodb.org/browse/SERVER-119319"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4148","description":"A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline."}]},{"artifact":{"id":"cbeb1ac80586032b","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.2.9-1ubuntu0.6:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/ubuntu/libexpat1@2.2.9-1ubuntu0.6?arch=amd64&distro=ubuntu-20.04&upstream=expat","type":"deb","version":"2.2.9-1ubuntu0.6","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-77214","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"expat","version":"2.2.9-1ubuntu0.6"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-77214","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-77214","cwe":"CWE-125","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-77214","date":"2026-10-08","epss":0.00549,"percentile":0.44207}],"risk":0.2745,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-77214"},"relatedVulnerabilities":[{"id":"CVE-2026-77214","cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77214","cwe":"CWE-125","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-77214","date":"2026-10-08","epss":0.00549,"percentile":0.44207}],"urls":["https://github.com/libexpat/libexpat/commit/13c5f63a7f1c52c2feee3b16a1134d4fb68e9ea0","https://github.com/libexpat/libexpat/pull/1393","https://www.vulncheck.com/advisories/libexpat-heap-buffer-over-read-in-xmlparse-c-via-xml-parsebuffer"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77214","description":"libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XML_ParseBuffer advances the parse buffer end with parser->m_bufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XML_ParseBuffer calls move m_bufferEnd past the end of the heap allocation and subsequent parsing reads out of bounds. Reaching this path requires a parse buffer to already be present; otherwise XML_ParseBuffer returns XML_ERROR_NO_BUFFER. A buffer is present after a prior call to XML_GetBuffer, either directly (the common case) or indirectly through a prior XML_Parse call that allocates the buffer internally. The over-read discloses adjacent heap memory to the calling application, recovering heap pointers, libc function pointers, and code pointers sufficient to defeat ASLR and build further exploitation primitives."}]},{"artifact":{"id":"e17b266d1d27c88b","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.13.3:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.13.3:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3","type":"java-archive","version":"2.13.3","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"56deb9ea2c93a7a556b3afbedd616d342963464e","algorithm":"sha1"}]},"locations":[{"path":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/lib/unifi/lib/jackson-databind-2.13.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.18.10"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wjgm-6hv5-3cvf","versionConstraint":">=2.8.0,<2.18.10 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.13.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wjgm-6hv5-3cvf","fix":{"state":"fixed","versions":["2.18.10"],"available":[{"date":"2026-09-29","kind":"first-observed","version":"2.18.10"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19032","cwe":"CWE-470","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-19032","cwe":"CWE-610","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-19032","date":"2026-10-08","epss":0.00529,"percentile":0.42947}],"risk":0.27243500000000004,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wjgm-6hv5-3cvf","description":"jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution"},"relatedVulnerabilities":[{"id":"CVE-2026-19032","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19032","cwe":"CWE-470","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-19032","cwe":"CWE-610","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-19032","date":"2026-10-08","epss":0.00529,"percentile":0.42947}],"urls":["https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19032","description":"jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, a string bound from untrusted JSON is passed to new URI(value) and then to Path.of(uri). When that throws FileSystemNotFoundException, the code enumerates ServiceLoader<FileSystemProvider> and calls provider.getPath(uri) on the first provider whose scheme matches the attacker-chosen scheme. Untrusted JSON can therefore select and drive an arbitrary registered FileSystemProvider during readValue under a default JsonMapper, and forces provider class loading at the same time. With only the JDK built-in providers (file, jar/zipfs) present, the resolved path is inert and no mount or network I/O occurs; further impact requires a side-effecting third-party FileSystemProvider on the classpath. This affects com.fasterxml.jackson.core:jackson-databind from 2.8.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2. Binding java.nio.file.Path from untrusted JSON should be avoided regardless of version."}]},{"artifact":{"id":"a450a35922815aef","cpes":["cpe:2.3:a:mongodb-clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_clients:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_clients:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-clients","purl":"pkg:deb/ubuntu/mongodb-clients@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-clients/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-clients/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-clients.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-clients.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-82071","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-82071","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-82071","cwe":"CWE-787","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-82071","date":"2026-10-08","epss":0.0054,"percentile":0.43651}],"risk":0.27,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-82071"},"relatedVulnerabilities":[{"id":"CVE-2026-82071","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82071","cwe":"CWE-787","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-82071","date":"2026-10-08","epss":0.0054,"percentile":0.43651}],"urls":["https://jira.mongodb.org/browse/SERVER-131860"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-82071","description":"Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process, causing a denial of service via server crash, with potential for further impact including arbitrary code execution."}]},{"artifact":{"id":"3a6236c3c33aedb7","cpes":["cpe:2.3:a:mongodb-server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server","purl":"pkg:deb/ubuntu/mongodb-server@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=all&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.list"},{"path":"/var/lib/dpkg/info/mongodb-server.postinst","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postinst"},{"path":"/var/lib/dpkg/info/mongodb-server.postrm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.postrm"},{"path":"/var/lib/dpkg/info/mongodb-server.prerm","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server.prerm"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-82071","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-82071","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-82071","cwe":"CWE-787","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-82071","date":"2026-10-08","epss":0.0054,"percentile":0.43651}],"risk":0.27,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-82071"},"relatedVulnerabilities":[{"id":"CVE-2026-82071","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82071","cwe":"CWE-787","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-82071","date":"2026-10-08","epss":0.0054,"percentile":0.43651}],"urls":["https://jira.mongodb.org/browse/SERVER-131860"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-82071","description":"Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process, causing a denial of service via server crash, with potential for further impact including arbitrary code execution."}]},{"artifact":{"id":"a58f3cff9c145d71","cpes":["cpe:2.3:a:mongodb-server-core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server-core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server_core:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb-server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb_server:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb-server-core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*","cpe:2.3:a:mongodb:mongodb_server_core:1\\:3.6.9\\+really3.6.8\\+90\\~g8e540c0b6d-0ubuntu5.3:*:*:*:*:*:*:*"],"name":"mongodb-server-core","purl":"pkg:deb/ubuntu/mongodb-server-core@1%3A3.6.9%2Breally3.6.8%2B90~g8e540c0b6d-0ubuntu5.3?arch=amd64&distro=ubuntu-20.04&upstream=mongodb","type":"deb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3","language":"","licenses":["AGPL-3.0-OpenSSL","Apache-2.0","BSD-3-PCRE","BSD-3-clause","BSD-3-google","BSD-3-intel","BSD-3-redis","BSD-3-snowball","BSL-1.0","Expat","GPL-2","GPL-2-or-3","GPL-3","loki","mk","public-domain","zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/mongodb-server-core/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/mongodb-server-core/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/mongodb-server-core.list","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/mongodb-server-core.list"}],"upstreams":[{"name":"mongodb"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-82071","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"mongodb","version":"1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2026-82071","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-82071","cwe":"CWE-787","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-82071","date":"2026-10-08","epss":0.0054,"percentile":0.43651}],"risk":0.27,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-82071"},"relatedVulnerabilities":[{"id":"CVE-2026-82071","cvss":[{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@mongodb.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82071","cwe":"CWE-787","type":"Secondary","source":"cna@mongodb.com"}],"epss":[{"cve":"CVE-2026-82071","date":"2026-10-08","epss":0.0054,"percentile":0.43651}],"urls":["https://jira.mongodb.org/browse/SERVER-131860"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-82071","description":"Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process, causing a denial of service via server crash, with potential for further impact including arbitrary code execution."}]},{"artifact":{"id":"6915e15d8d0bdd11","cpes":["cpe:2.3:a:libssl1.1:libssl1.1:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"libssl1.1","purl":"pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04&upstream=openssl","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/libssl1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/libssl1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openssl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-69420","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-69420","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-69420","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69420","date":"2026-10-08","epss":0.00899,"percentile":0.58405}],"risk":0.2697,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-69420"},"relatedVulnerabilities":[{"id":"CVE-2025-69420","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69420","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69420","date":"2026-10-08","epss":0.00899,"percentile":0.58405}],"urls":["https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9","https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a","https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e","https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b","https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69420","description":"Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue."}]},{"artifact":{"id":"e16660f0237bb0bb","cpes":["cpe:2.3:a:openssl:openssl:1.1.1f-1ubuntu2.20:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.20?arch=amd64&distro=ubuntu-20.04","type":"deb","version":"1.1.1f-1ubuntu2.20","language":"","licenses":["OpenSSL"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libssl1.1/copyright","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/usr/share/doc/openssl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.conffiles","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.md5sums","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssl.list","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.list"},{"path":"/var/lib/dpkg/info/openssl.postinst","layerID":"sha256:d1ae14a2598dc84bb4bcbaf5e93cd25e546c3fd8ac83c1b2e6c3945c46956dc5","accessPath":"/var/lib/dpkg/info/openssl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-69420","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openssl","version":"1.1.1f-1ubuntu2.20"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-69420","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-69420","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69420","date":"2026-10-08","epss":0.00899,"percentile":0.58405}],"risk":0.2697,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-69420"},"relatedVulnerabilities":[{"id":"CVE-2025-69420","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69420","cwe":"CWE-754","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2025-69420","date":"2026-10-08","epss":0.00899,"percentile":0.58405}],"urls":["https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9","https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a","https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e","https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b","https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085","https://openssl-library.org/news/secadv/20260127.txt","https://cert-portal.siemens.com/productcert/html/ssa-265688.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69420","description":"Issue summary: A type confusion vulnerability exists in the TimeStamp Response\nverification code where an ASN1_TYPE union member is accessed without first\nvalidating the type, causing an invalid or NULL pointer dereference when\nprocessing a malformed TimeStamp Response file.\n\nImpact summary: An application calling TS_RESP_verify_response() with a\nmalformed TimeStamp Response can be caused to dereference an invalid or\nNULL pointer when reading, resulting in a Denial of Service.\n\nThe functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2()\naccess the signing cert attribute value without validating its type.\nWhen the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory\nthrough the ASN1_TYPE union, causing a crash.\n\nExploiting this vulnerability requires an attacker to provide a malformed\nTimeStamp Response to an application that verifies timestamp responses. The\nTimeStamp protocol (RFC 3161) is not widely used and the impact of the\nexploit is just a Denial of Service. For these reasons the issue was\nassessed as Low severity.\n\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the TimeStamp Response implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\n\nOpenSSL 1.0.2 is not affected by this issue."}]},{"artifact":{"id":"52adf3e8289b245b","cpes":["cpe:2.3:a:openjdk-17-jre-headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre-headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre_headless:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17-jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17_jre:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_17:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-17-jre-headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_17_jre_headless:17.0.9\\+9-1\\~20.04:*:*:*:*:*:*:*"],"name":"openjdk-17-jre-headless","purl":"pkg:deb/ubuntu/openjdk-17-jre-headless@17.0.9%2B9-1~20.04?arch=amd64&distro=ubuntu-20.04&upstream=openjdk-17","type":"deb","version":"17.0.9+9-1~20.04","language":"","licenses":["Apache-2.0","BSD-C3","GPL","GPL-2","LGPL","LGPL-2","LGPL-2-1","MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openjdk-17-jre-headless/copyright","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/usr/share/doc/openjdk-17-jre-headless/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","layerID":"sha256:0fdfee78a33640f14403adf1684e24ebd404fb60447507af0a422c95b1e00958","accessPath":"/var/lib/dpkg/info/openjdk-17-jre-headless:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjdk-17"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-53057","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"20.04"},"package":{"name":"openjdk-17","version":"17.0.9+9-1~20.04"},"namespace":"ubuntu:distro:ubuntu:20.04"}}],"vulnerability":{"id":"CVE-2025-53057","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-53057","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-53057","date":"2026-10-08","epss":0.00534,"percentile":0.43314}],"risk":0.267,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:20.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-53057"},"relatedVulnerabilities":[{"id":"CVE-2025-53057","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-53057","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-53057","date":"2026-10-08","epss":0.00534,"percentile":0.43314}],"urls":["https://www.oracle.com/security-alerts/cpuoct2025.html","https://lists.debian.org/debian-lts-announce/2025/10/msg00026.html","https://cert-portal.siemens.com/productcert/html/ssa-032379.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-53057","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and  21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]}],"grade":"F","score":"0.00","as_of":"2026-10-09T19:35:42.321Z","grype_db_version":"2026-10-09T06:32:32.000Z"}