{"grype_matches":[{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-26.P2.el7_9.16"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50387","versionConstraint":"< 32:9.11.4-26.P2.el7_9.16 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-50387","fix":{"state":"fixed","versions":["32:9.11.4-26.P2.el7_9.16"],"available":[{"date":"2024-06-12","kind":"first-observed","version":"32:9.11.4-26.P2.el7_9.16"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-50387","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-50387","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-50387","date":"2026-10-08","epss":0.99988,"percentile":0.99984}],"risk":74.991,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2024:3741","link":"https://access.redhat.com/errata/RHSA-2024:3741"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-50387","description":"Processing specially crafted responses coming from DNSSEC-signed zones can lead to uncontrolled CPU usage, leading to a Denial of Service in the DNSSEC-validating resolver side.\nThis vulnerability applies only for systems where DNSSEC validation is enabled."},"relatedVulnerabilities":[{"id":"CVE-2023-50387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-50387","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-50387","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-50387","date":"2026-10-08","epss":0.99988,"percentile":0.99984}],"urls":["http://www.openwall.com/lists/oss-security/2024/02/16/2","http://www.openwall.com/lists/oss-security/2024/02/16/3","https://access.redhat.com/security/cve/CVE-2023-50387","https://bugzilla.suse.com/show_bug.cgi?id=1219823","https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html","https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1","https://kb.isc.org/docs/cve-2023-50387","https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html","https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/","https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387","https://news.ycombinator.com/item?id=39367411","https://news.ycombinator.com/item?id=39372384","https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/","https://security.netapp.com/advisory/ntap-20240307-0007/","https://www.athene-center.de/aktuelles/key-trap","https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf","https://www.isc.org/blogs/2024-bind-security-release/","https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/","https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/","https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50387","description":"Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-326.el7_9.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-2961","versionConstraint":"< 0:2.17-326.el7_9.3 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2024-2961","fix":{"state":"fixed","versions":["0:2.17-326.el7_9.3"],"available":[{"date":"2024-06-05","kind":"first-observed","version":"0:2.17-326.el7_9.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-08","epss":0.8833,"percentile":0.99769}],"risk":71.98895,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2024:3588","link":"https://access.redhat.com/errata/RHSA-2024:3588"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-2961","description":"An out-of-bounds write flaw was found in the ISO-2022-CN-EXT plugin for glibc's iconv library. When converting from UCS4 charset, adding certain escape charterers is required to indicate where the charset was changed to the library. During this process, iconv improperly checks the boundaries of internal buffers, leading to a buffer overflow, which allows writing up to 3 bytes outside the desired memory location. This issue may allow an attacker to craft a malicious characters sequence that will trigger the out-of-bounds write and perform remote code execution, presenting a high impact to the Integrity, Confidentiality, and Availability triad."},"relatedVulnerabilities":[{"id":"CVE-2024-2961","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.3,"impactScore":4.8,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-08","epss":0.8833,"percentile":0.99769}],"urls":["http://www.openwall.com/lists/oss-security/2024/04/17/9","http://www.openwall.com/lists/oss-security/2024/04/18/4","http://www.openwall.com/lists/oss-security/2024/04/24/2","http://www.openwall.com/lists/oss-security/2024/05/27/1","http://www.openwall.com/lists/oss-security/2024/05/27/2","http://www.openwall.com/lists/oss-security/2024/05/27/3","http://www.openwall.com/lists/oss-security/2024/05/27/4","http://www.openwall.com/lists/oss-security/2024/05/27/5","http://www.openwall.com/lists/oss-security/2024/05/27/6","http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/","https://security.netapp.com/advisory/ntap-20240531-0002/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004","https://www.ambionics.io/blog/iconv-cve-2024-2961-p1","https://www.ambionics.io/blog/iconv-cve-2024-2961-p2","https://www.ambionics.io/blog/iconv-cve-2024-2961-p3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2961","description":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-326.el7_9.3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2961","versionConstraint":"< 0:2.17-326.el7_9.3 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2024-2961","fix":{"state":"fixed","versions":["0:2.17-326.el7_9.3"],"available":[{"date":"2024-06-05","kind":"first-observed","version":"0:2.17-326.el7_9.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-08","epss":0.8833,"percentile":0.99769}],"risk":71.98895,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2024:3588","link":"https://access.redhat.com/errata/RHSA-2024:3588"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-2961","description":"An out-of-bounds write flaw was found in the ISO-2022-CN-EXT plugin for glibc's iconv library. When converting from UCS4 charset, adding certain escape charterers is required to indicate where the charset was changed to the library. During this process, iconv improperly checks the boundaries of internal buffers, leading to a buffer overflow, which allows writing up to 3 bytes outside the desired memory location. This issue may allow an attacker to craft a malicious characters sequence that will trigger the out-of-bounds write and perform remote code execution, presenting a high impact to the Integrity, Confidentiality, and Availability triad."},"relatedVulnerabilities":[{"id":"CVE-2024-2961","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7.3,"impactScore":4.8,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2961","cwe":"CWE-787","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2024-2961","date":"2026-10-08","epss":0.8833,"percentile":0.99769}],"urls":["http://www.openwall.com/lists/oss-security/2024/04/17/9","http://www.openwall.com/lists/oss-security/2024/04/18/4","http://www.openwall.com/lists/oss-security/2024/04/24/2","http://www.openwall.com/lists/oss-security/2024/05/27/1","http://www.openwall.com/lists/oss-security/2024/05/27/2","http://www.openwall.com/lists/oss-security/2024/05/27/3","http://www.openwall.com/lists/oss-security/2024/05/27/4","http://www.openwall.com/lists/oss-security/2024/05/27/5","http://www.openwall.com/lists/oss-security/2024/05/27/6","http://www.openwall.com/lists/oss-security/2024/07/22/5","https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/","https://security.netapp.com/advisory/ntap-20240531-0002/","https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004","https://www.ambionics.io/blog/iconv-cve-2024-2961-p1","https://www.ambionics.io/blog/iconv-cve-2024-2961-p2","https://www.ambionics.io/blog/iconv-cve-2024-2961-p3","https://cert-portal.siemens.com/productcert/html/ssa-082556.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2961","description":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-16.P2.el7_8.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-8617","versionConstraint":"< 32:9.11.4-16.P2.el7_8.6 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-8617","fix":{"state":"fixed","versions":["32:9.11.4-16.P2.el7_8.6"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"32:9.11.4-16.P2.el7_8.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8617","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8617","date":"2026-10-08","epss":0.93422,"percentile":0.99839}],"risk":70.0665,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:2344","link":"https://access.redhat.com/errata/RHSA-2020:2344"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-8617","description":"An assertion failure was found in BIND, which checks the validity of messages containing TSIG resource records. This flaw allows an attacker that knows or successfully guesses the name of the TSIG key used by the server to use a specially-crafted message, potentially causing a BIND server to reach an inconsistent state or cause a denial of service. A majority of BIND servers have an internally-generated TSIG session key whose name is trivially guessable, and that key exposes the vulnerability unless specifically disabled."},"relatedVulnerabilities":[{"id":"CVE-2020-8617","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8617","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8617","date":"2026-10-08","epss":0.93422,"percentile":0.99839}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html","http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html","http://packetstormsecurity.com/files/157836/BIND-TSIG-Denial-Of-Service.html","http://www.openwall.com/lists/oss-security/2020/05/19/4","https://kb.isc.org/docs/cve-2020-8617","https://lists.debian.org/debian-lts-announce/2020/05/msg00031.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JKJXVBOKZ36ER3EUCR7VRB7WGHIIMPNJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WOGCJS2XQ3SQNF4W6GLZ73LWZJ6ZZWZI/","https://security.netapp.com/advisory/ntap-20200522-0002/","https://usn.ubuntu.com/4365-1/","https://usn.ubuntu.com/4365-2/","https://www.debian.org/security/2020/dsa-4689"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-8617","description":"Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. In releases of BIND dating from March 2018 and after, an assertion check in tsig.c detects this inconsistent state and deliberately exits. Prior to the introduction of the check the server would continue operating in an inconsistent state, with potentially harmful results."}]},{"artifact":{"id":"a46b4702cba559de","cpes":["cpe:2.3:a:centos:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss","purl":"pkg:rpm/centos/nss@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-2183","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"0:3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-2183","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2183","date":"2026-10-08","epss":0.94697,"percentile":0.99857}],"risk":59.185624999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-2183","description":"A flaw was found in the way the DES/3DES cipher was used as part of the TLS/SSL protocol. A man-in-the-middle attacker could use this flaw to recover some plaintext data by capturing large amounts of encrypted traffic between TLS/SSL server and client if the communication used a DES/3DES based ciphersuite."},"relatedVulnerabilities":[{"id":"CVE-2016-2183","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2183","date":"2026-10-08","epss":0.94697,"percentile":0.99857}],"urls":["http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html","http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html","http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html","http://rhn.redhat.com/errata/RHSA-2017-0336.html","http://rhn.redhat.com/errata/RHSA-2017-0337.html","http://rhn.redhat.com/errata/RHSA-2017-0338.html","http://rhn.redhat.com/errata/RHSA-2017-0462.html","http://seclists.org/fulldisclosure/2017/Jul/31","http://seclists.org/fulldisclosure/2017/May/105","http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697","http://www-01.ibm.com/support/docview.wss?uid=swg21991482","http://www-01.ibm.com/support/docview.wss?uid=swg21995039","http://www.debian.org/security/2016/dsa-3673","http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","http://www.securityfocus.com/archive/1/539885/100/0/threaded","http://www.securityfocus.com/archive/1/540341/100/0/threaded","http://www.securityfocus.com/archive/1/541104/100/0/threaded","http://www.securityfocus.com/archive/1/542005/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded","http://www.securityfocus.com/bid/92630","http://www.securityfocus.com/bid/95568","http://www.securitytracker.com/id/1036696","http://www.splunk.com/view/SP-CAAAPSV","http://www.splunk.com/view/SP-CAAAPUE","http://www.ubuntu.com/usn/USN-3087-1","http://www.ubuntu.com/usn/USN-3087-2","http://www.ubuntu.com/usn/USN-3179-1","http://www.ubuntu.com/usn/USN-3194-1","http://www.ubuntu.com/usn/USN-3198-1","http://www.ubuntu.com/usn/USN-3270-1","http://www.ubuntu.com/usn/USN-3372-1","https://access.redhat.com/articles/2548661","https://access.redhat.com/errata/RHSA-2017:1216","https://access.redhat.com/errata/RHSA-2017:2708","https://access.redhat.com/errata/RHSA-2017:2709","https://access.redhat.com/errata/RHSA-2017:2710","https://access.redhat.com/errata/RHSA-2017:3113","https://access.redhat.com/errata/RHSA-2017:3114","https://access.redhat.com/errata/RHSA-2017:3239","https://access.redhat.com/errata/RHSA-2017:3240","https://access.redhat.com/errata/RHSA-2018:2123","https://access.redhat.com/errata/RHSA-2019:1245","https://access.redhat.com/errata/RHSA-2019:2859","https://access.redhat.com/errata/RHSA-2020:0451","https://access.redhat.com/security/cve/cve-2016-2183","https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/","https://bto.bluecoat.com/security-advisory/sa133","https://bugzilla.redhat.com/show_bug.cgi?id=1369383","https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849","https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","https://kc.mcafee.com/corporate/index?page=content&id=SB10171","https://kc.mcafee.com/corporate/index?page=content&id=SB10186","https://kc.mcafee.com/corporate/index?page=content&id=SB10197","https://kc.mcafee.com/corporate/index?page=content&id=SB10215","https://kc.mcafee.com/corporate/index?page=content&id=SB10310","https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/","https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","https://seclists.org/bugtraq/2018/Nov/21","https://security.gentoo.org/glsa/201612-16","https://security.gentoo.org/glsa/201701-65","https://security.gentoo.org/glsa/201707-01","https://security.netapp.com/advisory/ntap-20160915-0001/","https://security.netapp.com/advisory/ntap-20170119-0001/","https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613","https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178","https://support.f5.com/csp/article/K13167034","https://sweet32.info/","https://wiki.opendaylight.org/view/Security_Advisories","https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","https://www.exploit-db.com/exploits/42091/","https://www.ietf.org/mail-archive/web/tls/current/msg04560.html","https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008","https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/","https://www.openssl.org/blog/blog/2016/08/24/sweet32/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.sigsac.org/ccs/CCS2016/accepted-papers/","https://www.tenable.com/security/tns-2016-16","https://www.tenable.com/security/tns-2016-20","https://www.tenable.com/security/tns-2016-21","https://www.tenable.com/security/tns-2017-09","https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue","https://www.vicarius.io/vsociety/posts/cve-2016-2183-detection-sweet32-vulnerability","https://www.vicarius.io/vsociety/posts/cve-2016-2183-mitigate-sweet32-vulnerability"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2183","description":"The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack."}]},{"artifact":{"id":"4f9adc24f7b50922","cpes":["cpe:2.3:a:nss-sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-sysinit","purl":"pkg:rpm/centos/nss-sysinit@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-2183","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-2183","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2183","date":"2026-10-08","epss":0.94697,"percentile":0.99857}],"risk":59.185624999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-2183","description":"A flaw was found in the way the DES/3DES cipher was used as part of the TLS/SSL protocol. A man-in-the-middle attacker could use this flaw to recover some plaintext data by capturing large amounts of encrypted traffic between TLS/SSL server and client if the communication used a DES/3DES based ciphersuite."},"relatedVulnerabilities":[{"id":"CVE-2016-2183","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2183","date":"2026-10-08","epss":0.94697,"percentile":0.99857}],"urls":["http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html","http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html","http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html","http://rhn.redhat.com/errata/RHSA-2017-0336.html","http://rhn.redhat.com/errata/RHSA-2017-0337.html","http://rhn.redhat.com/errata/RHSA-2017-0338.html","http://rhn.redhat.com/errata/RHSA-2017-0462.html","http://seclists.org/fulldisclosure/2017/Jul/31","http://seclists.org/fulldisclosure/2017/May/105","http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697","http://www-01.ibm.com/support/docview.wss?uid=swg21991482","http://www-01.ibm.com/support/docview.wss?uid=swg21995039","http://www.debian.org/security/2016/dsa-3673","http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","http://www.securityfocus.com/archive/1/539885/100/0/threaded","http://www.securityfocus.com/archive/1/540341/100/0/threaded","http://www.securityfocus.com/archive/1/541104/100/0/threaded","http://www.securityfocus.com/archive/1/542005/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded","http://www.securityfocus.com/bid/92630","http://www.securityfocus.com/bid/95568","http://www.securitytracker.com/id/1036696","http://www.splunk.com/view/SP-CAAAPSV","http://www.splunk.com/view/SP-CAAAPUE","http://www.ubuntu.com/usn/USN-3087-1","http://www.ubuntu.com/usn/USN-3087-2","http://www.ubuntu.com/usn/USN-3179-1","http://www.ubuntu.com/usn/USN-3194-1","http://www.ubuntu.com/usn/USN-3198-1","http://www.ubuntu.com/usn/USN-3270-1","http://www.ubuntu.com/usn/USN-3372-1","https://access.redhat.com/articles/2548661","https://access.redhat.com/errata/RHSA-2017:1216","https://access.redhat.com/errata/RHSA-2017:2708","https://access.redhat.com/errata/RHSA-2017:2709","https://access.redhat.com/errata/RHSA-2017:2710","https://access.redhat.com/errata/RHSA-2017:3113","https://access.redhat.com/errata/RHSA-2017:3114","https://access.redhat.com/errata/RHSA-2017:3239","https://access.redhat.com/errata/RHSA-2017:3240","https://access.redhat.com/errata/RHSA-2018:2123","https://access.redhat.com/errata/RHSA-2019:1245","https://access.redhat.com/errata/RHSA-2019:2859","https://access.redhat.com/errata/RHSA-2020:0451","https://access.redhat.com/security/cve/cve-2016-2183","https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/","https://bto.bluecoat.com/security-advisory/sa133","https://bugzilla.redhat.com/show_bug.cgi?id=1369383","https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849","https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","https://kc.mcafee.com/corporate/index?page=content&id=SB10171","https://kc.mcafee.com/corporate/index?page=content&id=SB10186","https://kc.mcafee.com/corporate/index?page=content&id=SB10197","https://kc.mcafee.com/corporate/index?page=content&id=SB10215","https://kc.mcafee.com/corporate/index?page=content&id=SB10310","https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/","https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","https://seclists.org/bugtraq/2018/Nov/21","https://security.gentoo.org/glsa/201612-16","https://security.gentoo.org/glsa/201701-65","https://security.gentoo.org/glsa/201707-01","https://security.netapp.com/advisory/ntap-20160915-0001/","https://security.netapp.com/advisory/ntap-20170119-0001/","https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613","https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178","https://support.f5.com/csp/article/K13167034","https://sweet32.info/","https://wiki.opendaylight.org/view/Security_Advisories","https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","https://www.exploit-db.com/exploits/42091/","https://www.ietf.org/mail-archive/web/tls/current/msg04560.html","https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008","https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/","https://www.openssl.org/blog/blog/2016/08/24/sweet32/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.sigsac.org/ccs/CCS2016/accepted-papers/","https://www.tenable.com/security/tns-2016-16","https://www.tenable.com/security/tns-2016-20","https://www.tenable.com/security/tns-2016-21","https://www.tenable.com/security/tns-2017-09","https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue","https://www.vicarius.io/vsociety/posts/cve-2016-2183-detection-sweet32-vulnerability","https://www.vicarius.io/vsociety/posts/cve-2016-2183-mitigate-sweet32-vulnerability"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2183","description":"The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack."}]},{"artifact":{"id":"00bceaeaf4078fe2","cpes":["cpe:2.3:a:nss-tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-tools","purl":"pkg:rpm/centos/nss-tools@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-2183","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-2183","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2183","date":"2026-10-08","epss":0.94697,"percentile":0.99857}],"risk":59.185624999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-2183","description":"A flaw was found in the way the DES/3DES cipher was used as part of the TLS/SSL protocol. A man-in-the-middle attacker could use this flaw to recover some plaintext data by capturing large amounts of encrypted traffic between TLS/SSL server and client if the communication used a DES/3DES based ciphersuite."},"relatedVulnerabilities":[{"id":"CVE-2016-2183","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2183","date":"2026-10-08","epss":0.94697,"percentile":0.99857}],"urls":["http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html","http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html","http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html","http://rhn.redhat.com/errata/RHSA-2017-0336.html","http://rhn.redhat.com/errata/RHSA-2017-0337.html","http://rhn.redhat.com/errata/RHSA-2017-0338.html","http://rhn.redhat.com/errata/RHSA-2017-0462.html","http://seclists.org/fulldisclosure/2017/Jul/31","http://seclists.org/fulldisclosure/2017/May/105","http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697","http://www-01.ibm.com/support/docview.wss?uid=swg21991482","http://www-01.ibm.com/support/docview.wss?uid=swg21995039","http://www.debian.org/security/2016/dsa-3673","http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","http://www.securityfocus.com/archive/1/539885/100/0/threaded","http://www.securityfocus.com/archive/1/540341/100/0/threaded","http://www.securityfocus.com/archive/1/541104/100/0/threaded","http://www.securityfocus.com/archive/1/542005/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded","http://www.securityfocus.com/bid/92630","http://www.securityfocus.com/bid/95568","http://www.securitytracker.com/id/1036696","http://www.splunk.com/view/SP-CAAAPSV","http://www.splunk.com/view/SP-CAAAPUE","http://www.ubuntu.com/usn/USN-3087-1","http://www.ubuntu.com/usn/USN-3087-2","http://www.ubuntu.com/usn/USN-3179-1","http://www.ubuntu.com/usn/USN-3194-1","http://www.ubuntu.com/usn/USN-3198-1","http://www.ubuntu.com/usn/USN-3270-1","http://www.ubuntu.com/usn/USN-3372-1","https://access.redhat.com/articles/2548661","https://access.redhat.com/errata/RHSA-2017:1216","https://access.redhat.com/errata/RHSA-2017:2708","https://access.redhat.com/errata/RHSA-2017:2709","https://access.redhat.com/errata/RHSA-2017:2710","https://access.redhat.com/errata/RHSA-2017:3113","https://access.redhat.com/errata/RHSA-2017:3114","https://access.redhat.com/errata/RHSA-2017:3239","https://access.redhat.com/errata/RHSA-2017:3240","https://access.redhat.com/errata/RHSA-2018:2123","https://access.redhat.com/errata/RHSA-2019:1245","https://access.redhat.com/errata/RHSA-2019:2859","https://access.redhat.com/errata/RHSA-2020:0451","https://access.redhat.com/security/cve/cve-2016-2183","https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/","https://bto.bluecoat.com/security-advisory/sa133","https://bugzilla.redhat.com/show_bug.cgi?id=1369383","https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849","https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","https://kc.mcafee.com/corporate/index?page=content&id=SB10171","https://kc.mcafee.com/corporate/index?page=content&id=SB10186","https://kc.mcafee.com/corporate/index?page=content&id=SB10197","https://kc.mcafee.com/corporate/index?page=content&id=SB10215","https://kc.mcafee.com/corporate/index?page=content&id=SB10310","https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/","https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","https://seclists.org/bugtraq/2018/Nov/21","https://security.gentoo.org/glsa/201612-16","https://security.gentoo.org/glsa/201701-65","https://security.gentoo.org/glsa/201707-01","https://security.netapp.com/advisory/ntap-20160915-0001/","https://security.netapp.com/advisory/ntap-20170119-0001/","https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613","https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178","https://support.f5.com/csp/article/K13167034","https://sweet32.info/","https://wiki.opendaylight.org/view/Security_Advisories","https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","https://www.exploit-db.com/exploits/42091/","https://www.ietf.org/mail-archive/web/tls/current/msg04560.html","https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008","https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/","https://www.openssl.org/blog/blog/2016/08/24/sweet32/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.sigsac.org/ccs/CCS2016/accepted-papers/","https://www.tenable.com/security/tns-2016-16","https://www.tenable.com/security/tns-2016-20","https://www.tenable.com/security/tns-2016-21","https://www.tenable.com/security/tns-2017-09","https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue","https://www.vicarius.io/vsociety/posts/cve-2016-2183-detection-sweet32-vulnerability","https://www.vicarius.io/vsociety/posts/cve-2016-2183-mitigate-sweet32-vulnerability"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2183","description":"The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-69.el7_5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-2183","versionConstraint":"< 0:2.7.5-69.el7_5 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-2183","fix":{"state":"fixed","versions":["0:2.7.5-69.el7_5"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-69.el7_5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2183","date":"2026-10-08","epss":0.94697,"percentile":0.99857}],"risk":59.185624999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:2123","link":"https://access.redhat.com/errata/RHSA-2018:2123"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-2183","description":"A flaw was found in the way the DES/3DES cipher was used as part of the TLS/SSL protocol. A man-in-the-middle attacker could use this flaw to recover some plaintext data by capturing large amounts of encrypted traffic between TLS/SSL server and client if the communication used a DES/3DES based ciphersuite."},"relatedVulnerabilities":[{"id":"CVE-2016-2183","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2183","date":"2026-10-08","epss":0.94697,"percentile":0.99857}],"urls":["http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html","http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html","http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html","http://rhn.redhat.com/errata/RHSA-2017-0336.html","http://rhn.redhat.com/errata/RHSA-2017-0337.html","http://rhn.redhat.com/errata/RHSA-2017-0338.html","http://rhn.redhat.com/errata/RHSA-2017-0462.html","http://seclists.org/fulldisclosure/2017/Jul/31","http://seclists.org/fulldisclosure/2017/May/105","http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697","http://www-01.ibm.com/support/docview.wss?uid=swg21991482","http://www-01.ibm.com/support/docview.wss?uid=swg21995039","http://www.debian.org/security/2016/dsa-3673","http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","http://www.securityfocus.com/archive/1/539885/100/0/threaded","http://www.securityfocus.com/archive/1/540341/100/0/threaded","http://www.securityfocus.com/archive/1/541104/100/0/threaded","http://www.securityfocus.com/archive/1/542005/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded","http://www.securityfocus.com/bid/92630","http://www.securityfocus.com/bid/95568","http://www.securitytracker.com/id/1036696","http://www.splunk.com/view/SP-CAAAPSV","http://www.splunk.com/view/SP-CAAAPUE","http://www.ubuntu.com/usn/USN-3087-1","http://www.ubuntu.com/usn/USN-3087-2","http://www.ubuntu.com/usn/USN-3179-1","http://www.ubuntu.com/usn/USN-3194-1","http://www.ubuntu.com/usn/USN-3198-1","http://www.ubuntu.com/usn/USN-3270-1","http://www.ubuntu.com/usn/USN-3372-1","https://access.redhat.com/articles/2548661","https://access.redhat.com/errata/RHSA-2017:1216","https://access.redhat.com/errata/RHSA-2017:2708","https://access.redhat.com/errata/RHSA-2017:2709","https://access.redhat.com/errata/RHSA-2017:2710","https://access.redhat.com/errata/RHSA-2017:3113","https://access.redhat.com/errata/RHSA-2017:3114","https://access.redhat.com/errata/RHSA-2017:3239","https://access.redhat.com/errata/RHSA-2017:3240","https://access.redhat.com/errata/RHSA-2018:2123","https://access.redhat.com/errata/RHSA-2019:1245","https://access.redhat.com/errata/RHSA-2019:2859","https://access.redhat.com/errata/RHSA-2020:0451","https://access.redhat.com/security/cve/cve-2016-2183","https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/","https://bto.bluecoat.com/security-advisory/sa133","https://bugzilla.redhat.com/show_bug.cgi?id=1369383","https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849","https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","https://kc.mcafee.com/corporate/index?page=content&id=SB10171","https://kc.mcafee.com/corporate/index?page=content&id=SB10186","https://kc.mcafee.com/corporate/index?page=content&id=SB10197","https://kc.mcafee.com/corporate/index?page=content&id=SB10215","https://kc.mcafee.com/corporate/index?page=content&id=SB10310","https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/","https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","https://seclists.org/bugtraq/2018/Nov/21","https://security.gentoo.org/glsa/201612-16","https://security.gentoo.org/glsa/201701-65","https://security.gentoo.org/glsa/201707-01","https://security.netapp.com/advisory/ntap-20160915-0001/","https://security.netapp.com/advisory/ntap-20170119-0001/","https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613","https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178","https://support.f5.com/csp/article/K13167034","https://sweet32.info/","https://wiki.opendaylight.org/view/Security_Advisories","https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","https://www.exploit-db.com/exploits/42091/","https://www.ietf.org/mail-archive/web/tls/current/msg04560.html","https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008","https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/","https://www.openssl.org/blog/blog/2016/08/24/sweet32/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.sigsac.org/ccs/CCS2016/accepted-papers/","https://www.tenable.com/security/tns-2016-16","https://www.tenable.com/security/tns-2016-20","https://www.tenable.com/security/tns-2016-21","https://www.tenable.com/security/tns-2017-09","https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue","https://www.vicarius.io/vsociety/posts/cve-2016-2183-detection-sweet32-vulnerability","https://www.vicarius.io/vsociety/posts/cve-2016-2183-mitigate-sweet32-vulnerability"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2183","description":"The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-69.el7_5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-2183","versionConstraint":"< 0:2.7.5-69.el7_5 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-2183","fix":{"state":"fixed","versions":["0:2.7.5-69.el7_5"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-69.el7_5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2183","date":"2026-10-08","epss":0.94697,"percentile":0.99857}],"risk":59.185624999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:2123","link":"https://access.redhat.com/errata/RHSA-2018:2123"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-2183","description":"A flaw was found in the way the DES/3DES cipher was used as part of the TLS/SSL protocol. A man-in-the-middle attacker could use this flaw to recover some plaintext data by capturing large amounts of encrypted traffic between TLS/SSL server and client if the communication used a DES/3DES based ciphersuite."},"relatedVulnerabilities":[{"id":"CVE-2016-2183","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2183","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2183","date":"2026-10-08","epss":0.94697,"percentile":0.99857}],"urls":["http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html","http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html","http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html","http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html","http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html","http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html","http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html","http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html","http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html","http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html","http://rhn.redhat.com/errata/RHSA-2017-0336.html","http://rhn.redhat.com/errata/RHSA-2017-0337.html","http://rhn.redhat.com/errata/RHSA-2017-0338.html","http://rhn.redhat.com/errata/RHSA-2017-0462.html","http://seclists.org/fulldisclosure/2017/Jul/31","http://seclists.org/fulldisclosure/2017/May/105","http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697","http://www-01.ibm.com/support/docview.wss?uid=swg21991482","http://www-01.ibm.com/support/docview.wss?uid=swg21995039","http://www.debian.org/security/2016/dsa-3673","http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en","http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html","http://www.securityfocus.com/archive/1/539885/100/0/threaded","http://www.securityfocus.com/archive/1/540341/100/0/threaded","http://www.securityfocus.com/archive/1/541104/100/0/threaded","http://www.securityfocus.com/archive/1/542005/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded","http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded","http://www.securityfocus.com/bid/92630","http://www.securityfocus.com/bid/95568","http://www.securitytracker.com/id/1036696","http://www.splunk.com/view/SP-CAAAPSV","http://www.splunk.com/view/SP-CAAAPUE","http://www.ubuntu.com/usn/USN-3087-1","http://www.ubuntu.com/usn/USN-3087-2","http://www.ubuntu.com/usn/USN-3179-1","http://www.ubuntu.com/usn/USN-3194-1","http://www.ubuntu.com/usn/USN-3198-1","http://www.ubuntu.com/usn/USN-3270-1","http://www.ubuntu.com/usn/USN-3372-1","https://access.redhat.com/articles/2548661","https://access.redhat.com/errata/RHSA-2017:1216","https://access.redhat.com/errata/RHSA-2017:2708","https://access.redhat.com/errata/RHSA-2017:2709","https://access.redhat.com/errata/RHSA-2017:2710","https://access.redhat.com/errata/RHSA-2017:3113","https://access.redhat.com/errata/RHSA-2017:3114","https://access.redhat.com/errata/RHSA-2017:3239","https://access.redhat.com/errata/RHSA-2017:3240","https://access.redhat.com/errata/RHSA-2018:2123","https://access.redhat.com/errata/RHSA-2019:1245","https://access.redhat.com/errata/RHSA-2019:2859","https://access.redhat.com/errata/RHSA-2020:0451","https://access.redhat.com/security/cve/cve-2016-2183","https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/","https://bto.bluecoat.com/security-advisory/sa133","https://bugzilla.redhat.com/show_bug.cgi?id=1369383","https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us","https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849","https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","https://kc.mcafee.com/corporate/index?page=content&id=SB10171","https://kc.mcafee.com/corporate/index?page=content&id=SB10186","https://kc.mcafee.com/corporate/index?page=content&id=SB10197","https://kc.mcafee.com/corporate/index?page=content&id=SB10215","https://kc.mcafee.com/corporate/index?page=content&id=SB10310","https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/","https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","https://seclists.org/bugtraq/2018/Nov/21","https://security.gentoo.org/glsa/201612-16","https://security.gentoo.org/glsa/201701-65","https://security.gentoo.org/glsa/201707-01","https://security.netapp.com/advisory/ntap-20160915-0001/","https://security.netapp.com/advisory/ntap-20170119-0001/","https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613","https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178","https://support.f5.com/csp/article/K13167034","https://sweet32.info/","https://wiki.opendaylight.org/view/Security_Advisories","https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24","https://www.exploit-db.com/exploits/42091/","https://www.ietf.org/mail-archive/web/tls/current/msg04560.html","https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008","https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/","https://www.openssl.org/blog/blog/2016/08/24/sweet32/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.sigsac.org/ccs/CCS2016/accepted-papers/","https://www.tenable.com/security/tns-2016-16","https://www.tenable.com/security/tns-2016-20","https://www.tenable.com/security/tns-2016-21","https://www.tenable.com/security/tns-2017-09","https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue","https://www.vicarius.io/vsociety/posts/cve-2016-2183-detection-sweet32-vulnerability","https://www.vicarius.io/vsociety/posts/cve-2016-2183-mitigate-sweet32-vulnerability"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2183","description":"The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-2068","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-2068","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":6.7,"impactScore":5.9,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2068","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-2068","cwe":"CWE-78","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-2068","date":"2026-10-08","epss":0.95404,"percentile":0.99869}],"risk":55.81134,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-2068","description":"A flaw was found in OpenSSL. The issue in CVE-2022-1292 did not find other places in the `c_rehash` script where it possibly passed the file names of certificates being hashed to a command executed through the shell. Some operating systems distribute this script in a manner where it is automatically executed. On these operating systems, this flaw allows an attacker to execute arbitrary commands with the privileges of the script."},"relatedVulnerabilities":[{"id":"CVE-2022-2068","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-2068","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-2068","cwe":"CWE-78","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-2068","date":"2026-10-08","epss":0.95404,"percentile":0.99869}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/","https://security.netapp.com/advisory/ntap-20220707-0008/","https://www.debian.org/security/2022/dsa-5169","https://www.openssl.org/news/secadv/20220621.txt","http://seclists.org/fulldisclosure/2024/Nov/0","https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-2068","description":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze)."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-26.P2.el7_9.16"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-50868","versionConstraint":"< 32:9.11.4-26.P2.el7_9.16 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-50868","fix":{"state":"fixed","versions":["32:9.11.4-26.P2.el7_9.16"],"available":[{"date":"2024-06-12","kind":"first-observed","version":"32:9.11.4-26.P2.el7_9.16"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-50868","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-50868","date":"2026-10-08","epss":0.73725,"percentile":0.99466}],"risk":55.293749999999996,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2024:3741","link":"https://access.redhat.com/errata/RHSA-2024:3741"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-50868","description":"A flaw was found in bind9. By flooding a DNSSEC resolver with responses coming from a DNSEC-signed zone using NSEC3, an attacker can lead the targeted resolver to a CPU exhaustion, further leading to a Denial of Service on the targeted host.\nThis vulnerability applies only for systems where DNSSEC validation is enabled."},"relatedVulnerabilities":[{"id":"CVE-2023-50868","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-50868","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-50868","date":"2026-10-08","epss":0.73725,"percentile":0.99466}],"urls":["http://www.openwall.com/lists/oss-security/2024/02/16/2","http://www.openwall.com/lists/oss-security/2024/02/16/3","https://access.redhat.com/security/cve/CVE-2023-50868","https://bugzilla.suse.com/show_bug.cgi?id=1219826","https://datatracker.ietf.org/doc/html/rfc5155","https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html","https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1","https://kb.isc.org/docs/cve-2023-50868","https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html","https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/","https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html","https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/","https://security.netapp.com/advisory/ntap-20240307-0008/","https://www.isc.org/blogs/2024-bind-security-release/","https://lists.debian.org/debian-lts-announce/2024/09/msg00001.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00035.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/","https://www.nlnetlabs.nl/downloads/unbound/CVE-2024-1931.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-50868","description":"The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-25.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-0778","versionConstraint":"< 1:1.0.2k-25.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-0778","fix":{"state":"fixed","versions":["1:1.0.2k-25.el7_9"],"available":[{"date":"2022-03-29","kind":"first-observed","version":"1:1.0.2k-25.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-0778","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-0778","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-0778","date":"2026-10-08","epss":0.73188,"percentile":0.99448}],"risk":54.891,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:1066","link":"https://access.redhat.com/errata/RHSA-2022:1066"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-0778","description":"A flaw was found in OpenSSL. It is possible to trigger an infinite loop by crafting a certificate that has invalid elliptic curve parameters. Since certificate parsing happens before verification of the certificate signature, any process that parses an externally supplied certificate may be subject to a denial of service attack."},"relatedVulnerabilities":[{"id":"CVE-2022-0778","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-0778","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-0778","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-0778","date":"2026-10-08","epss":0.73188,"percentile":0.99448}],"urls":["http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html","http://seclists.org/fulldisclosure/2022/May/33","http://seclists.org/fulldisclosure/2022/May/35","http://seclists.org/fulldisclosure/2022/May/38","https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246","https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html","https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002","https://security.gentoo.org/glsa/202210-02","https://security.netapp.com/advisory/ntap-20220321-0002/","https://security.netapp.com/advisory/ntap-20220429-0005/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://support.apple.com/kb/HT213255","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213257","https://www.debian.org/security/2022/dsa-5103","https://www.openssl.org/news/secadv/20220315.txt","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.tenable.com/security/tns-2022-06","https://www.tenable.com/security/tns-2022-07","https://www.tenable.com/security/tns-2022-08","https://www.tenable.com/security/tns-2022-09","https://cert-portal.siemens.com/productcert/html/ssa-019200.html","https://cert-portal.siemens.com/productcert/html/ssa-028723.html","https://cert-portal.siemens.com/productcert/html/ssa-108696.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-712929.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-0778","description":"The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1). Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m). Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc)."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-36221","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-36221","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36221","cwe":"CWE-191","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36221","date":"2026-10-08","epss":0.84994,"percentile":0.99709}],"risk":53.121249999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-36221","description":"An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck)."},"relatedVulnerabilities":[{"id":"CVE-2020-36221","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36221","cwe":"CWE-191","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36221","date":"2026-10-08","epss":0.84994,"percentile":0.99709}],"urls":["http://seclists.org/fulldisclosure/2021/May/64","http://seclists.org/fulldisclosure/2021/May/65","http://seclists.org/fulldisclosure/2021/May/70","https://bugs.openldap.org/show_bug.cgi?id=9404","https://bugs.openldap.org/show_bug.cgi?id=9424","https://git.openldap.org/openldap/openldap/-/commit/38ac838e4150c626bbfa0082b7e2cf3a2bb4df31","https://git.openldap.org/openldap/openldap/-/commit/58c1748e81c843c5b6e61648d2a4d1d82b47e842","https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html","https://security.netapp.com/advisory/ntap-20210226-0002/","https://support.apple.com/kb/HT212529","https://support.apple.com/kb/HT212530","https://support.apple.com/kb/HT212531","https://www.debian.org/security/2021/dsa-4845"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-36221","description":"An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck)."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-36228","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-36228","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36228","cwe":"CWE-191","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36228","date":"2026-10-08","epss":0.84994,"percentile":0.99709}],"risk":53.121249999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-36228","description":"An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service."},"relatedVulnerabilities":[{"id":"CVE-2020-36228","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36228","cwe":"CWE-191","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36228","date":"2026-10-08","epss":0.84994,"percentile":0.99709}],"urls":["http://seclists.org/fulldisclosure/2021/May/64","http://seclists.org/fulldisclosure/2021/May/65","http://seclists.org/fulldisclosure/2021/May/70","https://bugs.openldap.org/show_bug.cgi?id=9427","https://git.openldap.org/openldap/openldap/-/commit/91dccd25c347733b365adc74cb07d074512ed5ad","https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html","https://security.netapp.com/advisory/ntap-20210226-0002/","https://support.apple.com/kb/HT212529","https://support.apple.com/kb/HT212530","https://support.apple.com/kb/HT212531","https://www.debian.org/security/2021/dsa-4845"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-36228","description":"An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service."}]},{"artifact":{"id":"a37bd45d74f5547a","cpes":["cpe:2.3:a:libssh2:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:rpm/centos/libssh2@1.4.3-10.el7_2.1?arch=x86_64&distro=centos-7&upstream=libssh2-1.4.3-10.el7_2.1.src.rpm","type":"rpm","version":"1.4.3-10.el7_2.1","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-48795","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libssh2","version":"0:1.4.3-10.el7_2.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-48795","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48795","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-48795","cwe":"CWE-354","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-48795","date":"2026-10-08","epss":0.93547,"percentile":0.9984}],"risk":50.983115,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-48795","description":"A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure in OpenSSH 9.5 against keystroke timing attacks."},"relatedVulnerabilities":[{"id":"CVE-2023-48795","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-48795","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-48795","cwe":"CWE-354","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-48795","date":"2026-10-08","epss":0.93547,"percentile":0.9984}],"urls":["http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html","http://seclists.org/fulldisclosure/2024/Mar/21","http://www.openwall.com/lists/oss-security/2023/12/18/3","http://www.openwall.com/lists/oss-security/2023/12/19/5","http://www.openwall.com/lists/oss-security/2023/12/20/3","http://www.openwall.com/lists/oss-security/2024/03/06/3","http://www.openwall.com/lists/oss-security/2024/04/17/8","https://access.redhat.com/security/cve/cve-2023-48795","https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/","https://bugs.gentoo.org/920280","https://bugzilla.redhat.com/show_bug.cgi?id=2254210","https://bugzilla.suse.com/show_bug.cgi?id=1217950","https://crates.io/crates/thrussh/versions","https://filezilla-project.org/versions.php","https://forum.netgate.com/topic/184941/terrapin-ssh-attack","https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6","https://github.com/NixOS/nixpkgs/pull/275249","https://github.com/PowerShell/Win32-OpenSSH/issues/2189","https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta","https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0","https://github.com/TeraTermProject/teraterm/releases/tag/v5.1","https://github.com/advisories/GHSA-45x7-px36-x8w8","https://github.com/apache/mina-sshd/issues/445","https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab","https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22","https://github.com/cyd01/KiTTY/issues/520","https://github.com/drakkan/sftpgo/releases/tag/v2.5.6","https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42","https://github.com/erlang/otp/releases/tag/OTP-26.2.1","https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d","https://github.com/hierynomus/sshj/issues/916","https://github.com/janmojzis/tinyssh/issues/81","https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5","https://github.com/libssh2/libssh2/pull/1291","https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25","https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3","https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15","https://github.com/mwiede/jsch/issues/457","https://github.com/mwiede/jsch/pull/461","https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16","https://github.com/openssh/openssh-portable/commits/master","https://github.com/paramiko/paramiko/issues/2337","https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES","https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES","https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES","https://github.com/proftpd/proftpd/issues/456","https://github.com/rapier1/hpn-ssh/releases","https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst","https://github.com/ronf/asyncssh/tags","https://github.com/ssh-mitm/ssh-mitm/issues/165","https://github.com/warp-tech/russh/releases/tag/v0.40.2","https://gitlab.com/libssh/libssh-mirror/-/tags","https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ","https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg","https://help.panic.com/releasenotes/transmit5/","https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/","https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html","https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/","https://matt.ucc.asn.au/dropbear/CHANGES","https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC","https://news.ycombinator.com/item?id=38684904","https://news.ycombinator.com/item?id=38685286","https://news.ycombinator.com/item?id=38732005","https://nova.app/releases/#v11.8","https://oryx-embedded.com/download/#changelog","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002","https://roumenpetrov.info/secsh/#news20231220","https://security-tracker.debian.org/tracker/CVE-2023-48795","https://security-tracker.debian.org/tracker/source-package/libssh2","https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg","https://security-tracker.debian.org/tracker/source-package/trilead-ssh2","https://security.gentoo.org/glsa/202312-16","https://security.gentoo.org/glsa/202312-17","https://security.netapp.com/advisory/ntap-20240105-0004/","https://support.apple.com/kb/HT214084","https://thorntech.com/cve-2023-48795-and-sftp-gateway/","https://twitter.com/TrueSkrillor/status/1736774389725565005","https://ubuntu.com/security/CVE-2023-48795","https://winscp.net/eng/docs/history#6.2.2","https://www.bitvise.com/ssh-client-version-history#933","https://www.bitvise.com/ssh-server-version-history","https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html","https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update","https://www.debian.org/security/2023/dsa-5586","https://www.debian.org/security/2023/dsa-5588","https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc","https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508","https://www.netsarang.com/en/xshell-update-history/","https://www.openssh.com/openbsd.html","https://www.openssh.com/txt/release-9.6","https://www.openwall.com/lists/oss-security/2023/12/18/2","https://www.openwall.com/lists/oss-security/2023/12/20/3","https://www.paramiko.org/changelog.html","https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/","https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/","https://www.terrapin-attack.com","https://www.theregister.com/2023/12/20/terrapin_attack_ssh","https://www.vandyke.com/products/securecrt/history.txt","https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/","https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit","https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-48795","description":"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-26.P2.el7_9.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-8625","versionConstraint":"< 32:9.11.4-26.P2.el7_9.4 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-8625","fix":{"state":"fixed","versions":["32:9.11.4-26.P2.el7_9.4"],"available":[{"date":"2021-03-02","kind":"first-observed","version":"32:9.11.4-26.P2.el7_9.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8625","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8625","date":"2026-10-08","epss":0.64161,"percentile":0.99212}],"risk":50.04558,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:0671","link":"https://access.redhat.com/errata/RHSA-2021:0671"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-8625","description":"A buffer overflow flaw was found in the SPNEGO implementation used by BIND. This flaw allows a remote attacker to cause the named process to crash or possibly perform remote code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-8625","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8625","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8625","date":"2026-10-08","epss":0.64161,"percentile":0.99212}],"urls":["http://www.openwall.com/lists/oss-security/2021/02/19/1","http://www.openwall.com/lists/oss-security/2021/02/20/2","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://kb.isc.org/v1/docs/cve-2020-8625","https://lists.debian.org/debian-lts-announce/2021/02/msg00029.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EBTPWRQWRQEJNWY4NHO4WLS4KLJ3ERHZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYXAF7G45RXDVNUTWWCI2CVTHRZ67LST/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QWCMBOSZOJIIET7BWTRYS3HLX5TSDKHX/","https://security.netapp.com/advisory/ntap-20210319-0001/","https://www.debian.org/security/2021/dsa-4857","https://www.zerodayinitiative.com/advisories/ZDI-21-195/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-8625","description":"BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicitly setting valid values for the tkey-gssapi-keytab or tkey-gssapi-credentialconfiguration options. Although the default configuration is not vulnerable, GSS-TSIG is frequently used in networks where BIND is integrated with Samba, as well as in mixed-server environments that combine BIND servers with Active Directory domain controllers. The most likely outcome of a successful exploitation of the vulnerability is a crash of the named process. However, remote code execution, while unproven, is theoretically possible. Affects: BIND 9.5.0 -> 9.11.27, 9.12.0 -> 9.16.11, and versions BIND 9.11.3-S1 -> 9.11.27-S1 and 9.16.8-S1 -> 9.16.11-S1 of BIND Supported Preview Edition. Also release versions 9.17.0 -> 9.17.1 of the BIND 9.17 development branch"}]},{"artifact":{"id":"0e6bc16981a4025b","cpes":["cpe:2.3:a:centos:dracut:033-502.el7:*:*:*:*:*:*:*","cpe:2.3:a:dracut:dracut:033-502.el7:*:*:*:*:*:*:*"],"name":"dracut","purl":"pkg:rpm/centos/dracut@033-502.el7?arch=x86_64&distro=centos-7&upstream=dracut-033-502.el7.src.rpm","type":"rpm","version":"033-502.el7","language":"","licenses":["GPLv2+ and LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:033-502.el7_4.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-5715","versionConstraint":"< 0:033-502.el7_4.1 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"dracut","version":"0:033-502.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-5715","fix":{"state":"fixed","versions":["0:033-502.el7_4.1"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:033-502.el7_4.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":5.6,"impactScore":4,"exploitabilityScore":1.2},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-5715","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-5715","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-5715","date":"2026-10-08","epss":0.74041,"percentile":0.99476}],"risk":48.496855000000004,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHBA-2018:0042","link":"https://access.redhat.com/errata/RHBA-2018:0042"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-5715","description":"An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions (a commonly used performance optimization). There are three primary variants of the issue which differ in the way the speculative execution can be exploited. Variant CVE-2017-5715 triggers the speculative execution by utilizing branch target injection. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory accesses may cause allocation into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to cross the syscall and guest/host boundaries and read privileged memory by conducting targeted cache side-channel attacks."},"relatedVulnerabilities":[{"id":"CVE-2017-5715","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":5.6,"impactScore":4,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":1.9,"impactScore":2.9,"exploitabilityScore":3.4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":5.6,"impactScore":4,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-5715","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-5715","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-5715","date":"2026-10-08","epss":0.74041,"percentile":0.99476}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html","http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html","http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html","http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html","http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html","http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html","http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html","http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html","http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html","http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html","http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html","http://nvidia.custhelp.com/app/answers/detail/a_id/4609","http://nvidia.custhelp.com/app/answers/detail/a_id/4611","http://nvidia.custhelp.com/app/answers/detail/a_id/4613","http://nvidia.custhelp.com/app/answers/detail/a_id/4614","http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html","http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html","http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt","http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt","http://www.kb.cert.org/vuls/id/584653","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/102376","http://www.securitytracker.com/id/1040071","http://xenbits.xen.org/xsa/advisory-254.html","https://access.redhat.com/errata/RHSA-2018:0292","https://access.redhat.com/security/vulnerabilities/speculativeexecution","https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/","https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/","https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf","https://cert.vde.com/en-us/advisories/vde-2018-002","https://cert.vde.com/en-us/advisories/vde-2018-003","https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability","https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html","https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html","https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html","https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html","https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html","https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html","https://lists.debian.org/debian-lts-announce/2020/03/msg00025.html","https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002","https://seclists.org/bugtraq/2019/Jun/36","https://seclists.org/bugtraq/2019/Nov/16","https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr","https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc","https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc","https://security.gentoo.org/glsa/201810-06","https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html","https://security.netapp.com/advisory/ntap-20180104-0001/","https://security.paloaltonetworks.com/CVE-2017-5715","https://spectreattack.com/","https://support.citrix.com/article/CTX231399","https://support.f5.com/csp/article/K91229003","https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us","https://support.lenovo.com/us/en/solutions/LEN-18282","https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel","https://usn.ubuntu.com/3531-1/","https://usn.ubuntu.com/3531-3/","https://usn.ubuntu.com/3540-2/","https://usn.ubuntu.com/3541-2/","https://usn.ubuntu.com/3542-2/","https://usn.ubuntu.com/3549-1/","https://usn.ubuntu.com/3560-1/","https://usn.ubuntu.com/3561-1/","https://usn.ubuntu.com/3580-1/","https://usn.ubuntu.com/3581-1/","https://usn.ubuntu.com/3581-2/","https://usn.ubuntu.com/3582-1/","https://usn.ubuntu.com/3582-2/","https://usn.ubuntu.com/3594-1/","https://usn.ubuntu.com/3597-1/","https://usn.ubuntu.com/3597-2/","https://usn.ubuntu.com/3620-2/","https://usn.ubuntu.com/3690-1/","https://usn.ubuntu.com/3777-3/","https://usn.ubuntu.com/usn/usn-3516-1/","https://www.debian.org/security/2018/dsa-4120","https://www.debian.org/security/2018/dsa-4187","https://www.debian.org/security/2018/dsa-4188","https://www.debian.org/security/2018/dsa-4213","https://www.exploit-db.com/exploits/43427/","https://www.kb.cert.org/vuls/id/180049","https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/","https://www.synology.com/support/security/Synology_SA_18_01","https://www.vmware.com/security/advisories/VMSA-2018-0007.html","https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html","https://www.vmware.com/us/security/advisories/VMSA-2018-0004.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-5715","description":"Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-1292","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-1292","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":6.7,"impactScore":5.9,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1292","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-1292","cwe":"CWE-78","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-1292","date":"2026-10-08","epss":0.82612,"percentile":0.99661}],"risk":48.328019999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-1292","description":"A flaw was found in OpenSSL. The `c_rehash` script does not properly sanitize shell meta-characters to prevent command injection. Some operating systems distribute this script in a manner where it is automatically executed. This flaw allows an attacker to execute arbitrary commands with the privileges of the script on these operating systems."},"relatedVulnerabilities":[{"id":"CVE-2022-1292","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1292","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-1292","cwe":"CWE-78","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-1292","date":"2026-10-08","epss":0.82612,"percentile":0.99661}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23","https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011","https://security.gentoo.org/glsa/202210-02","https://security.netapp.com/advisory/ntap-20220602-0009/","https://security.netapp.com/advisory/ntap-20220729-0004/","https://www.debian.org/security/2022/dsa-5139","https://www.openssl.org/news/secadv/20220503.txt","https://www.oracle.com/security-alerts/cpujul2022.html","https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1292","description":"The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd)."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-36222","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-36222","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36222","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36222","date":"2026-10-08","epss":0.77236,"percentile":0.99545}],"risk":48.2725,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-36222","description":"A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service."},"relatedVulnerabilities":[{"id":"CVE-2020-36222","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36222","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36222","date":"2026-10-08","epss":0.77236,"percentile":0.99545}],"urls":["http://seclists.org/fulldisclosure/2021/May/64","http://seclists.org/fulldisclosure/2021/May/65","http://seclists.org/fulldisclosure/2021/May/70","https://bugs.openldap.org/show_bug.cgi?id=9406","https://bugs.openldap.org/show_bug.cgi?id=9407","https://git.openldap.org/openldap/openldap/-/commit/02dfc32d658fadc25e4040f78e36592f6e1e1ca0","https://git.openldap.org/openldap/openldap/-/commit/6ed057b5b728b50746c869bcc9c1f85d0bbbf6ed","https://git.openldap.org/openldap/openldap/-/commit/6ed057b5b728b50746c869bcc9c1f85d0bbbf6ed.aa","https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html","https://security.netapp.com/advisory/ntap-20210226-0002/","https://support.apple.com/kb/HT212529","https://support.apple.com/kb/HT212530","https://support.apple.com/kb/HT212531","https://www.debian.org/security/2021/dsa-4845"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-36222","description":"A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-36227","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-36227","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36227","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36227","date":"2026-10-08","epss":0.77236,"percentile":0.99545}],"risk":48.2725,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-36227","description":"A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service."},"relatedVulnerabilities":[{"id":"CVE-2020-36227","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36227","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36227","date":"2026-10-08","epss":0.77236,"percentile":0.99545}],"urls":["http://seclists.org/fulldisclosure/2021/May/64","http://seclists.org/fulldisclosure/2021/May/65","http://seclists.org/fulldisclosure/2021/May/70","https://bugs.openldap.org/show_bug.cgi?id=9428","https://git.openldap.org/openldap/openldap/-/commit/9d0e8485f3113505743baabf1167e01e4558ccf5","https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html","https://security.netapp.com/advisory/ntap-20210226-0002/","https://support.apple.com/kb/HT212529","https://support.apple.com/kb/HT212530","https://support.apple.com/kb/HT212531","https://www.debian.org/security/2021/dsa-4845"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-36227","description":"A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.9.4-61.el7_5.1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-5740","versionConstraint":"< 32:9.9.4-61.el7_5.1 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-5740","fix":{"state":"fixed","versions":["32:9.9.4-61.el7_5.1"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"32:9.9.4-61.el7_5.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-5740","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-5740","date":"2026-10-08","epss":0.5962,"percentile":0.99107}],"risk":44.714999999999996,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:2570","link":"https://access.redhat.com/errata/RHSA-2018:2570"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-5740","description":"A denial of service flaw was discovered in bind versions that include the \"deny-answer-aliases\" feature. This flaw may allow a remote attacker to trigger an INSIST assert in named leading to termination of the process and a denial of service condition."},"relatedVulnerabilities":[{"id":"CVE-2018-5740","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-5740","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-5740","date":"2026-10-08","epss":0.5962,"percentile":0.99107}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00026.html","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00027.html","http://www.securityfocus.com/bid/105055","http://www.securitytracker.com/id/1041436","https://access.redhat.com/errata/RHSA-2018:2570","https://access.redhat.com/errata/RHSA-2018:2571","https://kb.isc.org/docs/aa-01639","https://lists.debian.org/debian-lts-announce/2018/08/msg00033.html","https://lists.debian.org/debian-lts-announce/2021/11/msg00001.html","https://security.gentoo.org/glsa/201903-13","https://security.netapp.com/advisory/ntap-20180926-0003/","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03927en_us","https://usn.ubuntu.com/3769-1/","https://usn.ubuntu.com/3769-2/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-5740","description":"\"deny-answer-aliases\" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-26.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-0286","versionConstraint":"< 1:1.0.2k-26.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-0286","fix":{"state":"fixed","versions":["1:1.0.2k-26.el7_9"],"available":[{"date":"2023-03-21","kind":"first-observed","version":"1:1.0.2k-26.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0286","cwe":"CWE-843","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-0286","cwe":"CWE-843","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-0286","date":"2026-10-08","epss":0.59501,"percentile":0.99104}],"risk":44.328245,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2023:1335","link":"https://access.redhat.com/errata/RHSA-2023:1335"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-0286","description":"A type confusion vulnerability was found in OpenSSL when OpenSSL X.400 addresses processing inside an X.509 GeneralName. When CRL checking is enabled (for example, the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or cause a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, of which neither needs a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. In this case, this vulnerability is likely only to affect applications that have implemented their own functionality for retrieving CRLs over a network."},"relatedVulnerabilities":[{"id":"CVE-2023-0286","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0286","cwe":"CWE-843","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-0286","cwe":"CWE-843","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-0286","date":"2026-10-08","epss":0.59501,"percentile":0.99104}],"urls":["https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt","https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d","https://security.gentoo.org/glsa/202402-08","https://www.openssl.org/news/secadv/20230207.txt","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0286","description":"There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-2650","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-2650","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2650","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-2650","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-2650","date":"2026-10-08","epss":0.75116,"percentile":0.995}],"risk":43.1917,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-2650","description":"A flaw was found in OpenSSL resulting in a possible denial of service while translating ASN.1 object identifiers. Applications that use OBJ_obj2txt() directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may experience long delays when processing messages, which may lead to a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2023-2650","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2650","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-2650","cwe":"CWE-770","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-2650","date":"2026-10-08","epss":0.75116,"percentile":0.995}],"urls":["http://www.openwall.com/lists/oss-security/2023/05/30/1","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a","https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230703-0001/","https://security.netapp.com/advisory/ntap-20231027-0009/","https://www.debian.org/security/2023/dsa-5417","https://www.openssl.org/news/secadv/20230530.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-2650","description":"Issue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit.  OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime.  The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced.  This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL.  If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS.  It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain.  Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates.  This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-12.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-3737","versionConstraint":"< 1:1.0.2k-12.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-3737","fix":{"state":"fixed","versions":["1:1.0.2k-12.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"1:1.0.2k-12.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-3737","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-3737","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-3737","date":"2026-10-08","epss":0.78675,"percentile":0.99581}],"risk":42.877874999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0998","link":"https://access.redhat.com/errata/RHSA-2018:0998"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-3737","description":"OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected."},"relatedVulnerabilities":[{"id":"CVE-2017-3737","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-3737","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-3737","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-3737","date":"2026-10-08","epss":0.78675,"percentile":0.99581}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.securityfocus.com/bid/102103","http://www.securitytracker.com/id/1039978","https://access.redhat.com/errata/RHSA-2018:0998","https://access.redhat.com/errata/RHSA-2018:2185","https://access.redhat.com/errata/RHSA-2018:2186","https://access.redhat.com/errata/RHSA-2018:2187","https://cert-portal.siemens.com/productcert/pdf/ssa-179516.pdf","https://github.com/openssl/openssl/commit/898fb884b706aaeb283de4812340bb0bde8476dc","https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc","https://security.gentoo.org/glsa/201712-03","https://security.netapp.com/advisory/ntap-20171208-0001/","https://security.netapp.com/advisory/ntap-20180117-0002/","https://security.netapp.com/advisory/ntap-20180419-0002/","https://www.debian.org/security/2017/dsa-4065","https://www.digitalmunition.me/2017/12/cve-2017-3737-openssl-security-bypass-vulnerability/","https://www.openssl.org/news/secadv/20171207.txt","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.tenable.com/security/tns-2017-16"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-3737","description":"OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected."}]},{"artifact":{"id":"8a1e48233a68a928","cpes":["cpe:2.3:a:centos:zlib:1.2.7-17.el7:*:*:*:*:*:*:*","cpe:2.3:a:zlib:zlib:1.2.7-17.el7:*:*:*:*:*:*:*"],"name":"zlib","purl":"pkg:rpm/centos/zlib@1.2.7-17.el7?arch=x86_64&distro=centos-7&upstream=zlib-1.2.7-17.el7.src.rpm","type":"rpm","version":"1.2.7-17.el7","language":"","licenses":["zlib and Boost"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.2.7-20.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-25032","versionConstraint":"< 0:1.2.7-20.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"zlib","version":"0:1.2.7-17.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-25032","fix":{"state":"fixed","versions":["0:1.2.7-20.el7_9"],"available":[{"date":"2022-05-13","kind":"first-observed","version":"0:1.2.7-20.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-25032","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-25032","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-25032","date":"2026-10-08","epss":0.51733,"percentile":0.98922}],"risk":40.61040499999999,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:2213","link":"https://access.redhat.com/errata/RHSA-2022:2213"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-25032","description":"An out-of-bounds access flaw was found in zlib, which allows memory corruption when deflating (ex: when compressing) if the input has many distant matches. For some rare inputs with a large number of distant matches (crafted payloads), the buffer into which the compressed or deflated data is written can overwrite the distance symbol table which it overlays. This issue results in corrupted output due to invalid distances, which leads to out-of-bound access, corrupting the memory and potentially crashing the application."},"relatedVulnerabilities":[{"id":"CVE-2018-25032","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-25032","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-25032","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-25032","date":"2026-10-08","epss":0.51733,"percentile":0.98922}],"urls":["http://seclists.org/fulldisclosure/2022/May/33","http://seclists.org/fulldisclosure/2022/May/35","http://seclists.org/fulldisclosure/2022/May/38","http://www.openwall.com/lists/oss-security/2022/03/25/2","http://www.openwall.com/lists/oss-security/2022/03/26/1","https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf","https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531","https://github.com/madler/zlib/compare/v1.2.11...v1.2.12","https://github.com/madler/zlib/issues/605","https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html","https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html","https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/","https://security.gentoo.org/glsa/202210-42","https://security.netapp.com/advisory/ntap-20220526-0009/","https://security.netapp.com/advisory/ntap-20220729-0004/","https://support.apple.com/kb/HT213255","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213257","https://www.debian.org/security/2022/dsa-5111","https://www.openwall.com/lists/oss-security/2022/03/24/1","https://www.openwall.com/lists/oss-security/2022/03/28/1","https://www.openwall.com/lists/oss-security/2022/03/28/3","https://www.oracle.com/security-alerts/cpujul2022.html","https://cert-portal.siemens.com/productcert/html/ssa-333517.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-419740.html","https://cert-portal.siemens.com/productcert/html/ssa-470355.html","https://cert-portal.siemens.com/productcert/html/ssa-565386.html","https://cert-portal.siemens.com/productcert/html/ssa-942865.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-25032","description":"zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-27212","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-27212","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-27212","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-27212","date":"2026-10-08","epss":0.63321,"percentile":0.9919}],"risk":39.575625,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-27212","description":"A flaw was found in openldap. An assertion failure in slapd can occur resulting in a denial of service (daemon exit) via a short timestamp. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-27212","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-27212","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-27212","date":"2026-10-08","epss":0.63321,"percentile":0.9919}],"urls":["https://bugs.openldap.org/show_bug.cgi?id=9454","https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0","https://git.openldap.org/openldap/openldap/-/commit/9badb73425a67768c09bcaed1a9c26c684af6c30","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/02/msg00035.html","https://security.netapp.com/advisory/ntap-20210319-0005/","https://www.debian.org/security/2021/dsa-4860"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-27212","description":"In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-29155","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-29155","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-29155","cwe":"CWE-89","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-29155","date":"2026-10-08","epss":0.64487,"percentile":0.99221}],"risk":37.080025,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-29155","description":"A vulnerability was found in the openldap-servers package. A SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This issue occurs during an LDAP search operation when the search filter is processed due to a lack of proper escaping."},"relatedVulnerabilities":[{"id":"CVE-2022-29155","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-29155","cwe":"CWE-89","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-29155","date":"2026-10-08","epss":0.64487,"percentile":0.99221}],"urls":["https://bugs.openldap.org/show_bug.cgi?id=9815","https://lists.debian.org/debian-lts-announce/2022/05/msg00032.html","https://security.netapp.com/advisory/ntap-20220609-0007/","https://www.debian.org/security/2022/dsa-5140"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-29155","description":"In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping."}]},{"artifact":{"id":"a46b4702cba559de","cpes":["cpe:2.3:a:centos:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss","purl":"pkg:rpm/centos/nss@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-2808","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"0:3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-2808","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2015-2808","date":"2026-10-08","epss":0.73851,"percentile":0.9947}],"risk":36.9255,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-2808","description":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue."},"relatedVulnerabilities":[{"id":"CVE-2015-2808","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2015-2808","date":"2026-10-08","epss":0.73851,"percentile":0.9947}],"urls":["http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034","http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html","http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html","http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html","http://marc.info/?l=bugtraq&m=143456209711959&w=2","http://marc.info/?l=bugtraq&m=143629696317098&w=2","http://marc.info/?l=bugtraq&m=143741441012338&w=2","http://marc.info/?l=bugtraq&m=143817021313142&w=2","http://marc.info/?l=bugtraq&m=143817899717054&w=2","http://marc.info/?l=bugtraq&m=143818140118771&w=2","http://marc.info/?l=bugtraq&m=144043644216842&w=2","http://marc.info/?l=bugtraq&m=144059660127919&w=2","http://marc.info/?l=bugtraq&m=144059703728085&w=2","http://marc.info/?l=bugtraq&m=144060576831314&w=2","http://marc.info/?l=bugtraq&m=144060606031437&w=2","http://marc.info/?l=bugtraq&m=144069189622016&w=2","http://marc.info/?l=bugtraq&m=144102017024820&w=2","http://marc.info/?l=bugtraq&m=144104533800819&w=2","http://marc.info/?l=bugtraq&m=144104565600964&w=2","http://marc.info/?l=bugtraq&m=144493176821532&w=2","http://rhn.redhat.com/errata/RHSA-2015-1006.html","http://rhn.redhat.com/errata/RHSA-2015-1007.html","http://rhn.redhat.com/errata/RHSA-2015-1020.html","http://rhn.redhat.com/errata/RHSA-2015-1021.html","http://rhn.redhat.com/errata/RHSA-2015-1091.html","http://rhn.redhat.com/errata/RHSA-2015-1228.html","http://rhn.redhat.com/errata/RHSA-2015-1229.html","http://rhn.redhat.com/errata/RHSA-2015-1230.html","http://rhn.redhat.com/errata/RHSA-2015-1241.html","http://rhn.redhat.com/errata/RHSA-2015-1242.html","http://rhn.redhat.com/errata/RHSA-2015-1243.html","http://rhn.redhat.com/errata/RHSA-2015-1526.html","http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888","http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892","http://www-01.ibm.com/support/docview.wss?uid=swg21883640","http://www-304.ibm.com/support/docview.wss?uid=swg21903565","http://www-304.ibm.com/support/docview.wss?uid=swg21960015","http://www-304.ibm.com/support/docview.wss?uid=swg21960769","http://www.debian.org/security/2015/dsa-3316","http://www.debian.org/security/2015/dsa-3339","http://www.huawei.com/en/psirt/security-advisories/hw-454055","http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","http://www.securityfocus.com/bid/73684","http://www.securityfocus.com/bid/91787","http://www.securitytracker.com/id/1032599","http://www.securitytracker.com/id/1032600","http://www.securitytracker.com/id/1032707","http://www.securitytracker.com/id/1032708","http://www.securitytracker.com/id/1032734","http://www.securitytracker.com/id/1032788","http://www.securitytracker.com/id/1032858","http://www.securitytracker.com/id/1032868","http://www.securitytracker.com/id/1032910","http://www.securitytracker.com/id/1032990","http://www.securitytracker.com/id/1033071","http://www.securitytracker.com/id/1033072","http://www.securitytracker.com/id/1033386","http://www.securitytracker.com/id/1033415","http://www.securitytracker.com/id/1033431","http://www.securitytracker.com/id/1033432","http://www.securitytracker.com/id/1033737","http://www.securitytracker.com/id/1033769","http://www.securitytracker.com/id/1036222","http://www.ubuntu.com/usn/USN-2696-1","http://www.ubuntu.com/usn/USN-2706-1","http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm","https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789","https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650","https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888","https://kb.juniper.net/JSA10783","https://kc.mcafee.com/corporate/index?page=content&id=SB10163","https://security.gentoo.org/glsa/201512-10","https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709","https://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf","https://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-2808","description":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue."}]},{"artifact":{"id":"4f9adc24f7b50922","cpes":["cpe:2.3:a:nss-sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-sysinit","purl":"pkg:rpm/centos/nss-sysinit@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2015-2808","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-2808","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2015-2808","date":"2026-10-08","epss":0.73851,"percentile":0.9947}],"risk":36.9255,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-2808","description":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue."},"relatedVulnerabilities":[{"id":"CVE-2015-2808","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2015-2808","date":"2026-10-08","epss":0.73851,"percentile":0.9947}],"urls":["http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034","http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html","http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html","http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html","http://marc.info/?l=bugtraq&m=143456209711959&w=2","http://marc.info/?l=bugtraq&m=143629696317098&w=2","http://marc.info/?l=bugtraq&m=143741441012338&w=2","http://marc.info/?l=bugtraq&m=143817021313142&w=2","http://marc.info/?l=bugtraq&m=143817899717054&w=2","http://marc.info/?l=bugtraq&m=143818140118771&w=2","http://marc.info/?l=bugtraq&m=144043644216842&w=2","http://marc.info/?l=bugtraq&m=144059660127919&w=2","http://marc.info/?l=bugtraq&m=144059703728085&w=2","http://marc.info/?l=bugtraq&m=144060576831314&w=2","http://marc.info/?l=bugtraq&m=144060606031437&w=2","http://marc.info/?l=bugtraq&m=144069189622016&w=2","http://marc.info/?l=bugtraq&m=144102017024820&w=2","http://marc.info/?l=bugtraq&m=144104533800819&w=2","http://marc.info/?l=bugtraq&m=144104565600964&w=2","http://marc.info/?l=bugtraq&m=144493176821532&w=2","http://rhn.redhat.com/errata/RHSA-2015-1006.html","http://rhn.redhat.com/errata/RHSA-2015-1007.html","http://rhn.redhat.com/errata/RHSA-2015-1020.html","http://rhn.redhat.com/errata/RHSA-2015-1021.html","http://rhn.redhat.com/errata/RHSA-2015-1091.html","http://rhn.redhat.com/errata/RHSA-2015-1228.html","http://rhn.redhat.com/errata/RHSA-2015-1229.html","http://rhn.redhat.com/errata/RHSA-2015-1230.html","http://rhn.redhat.com/errata/RHSA-2015-1241.html","http://rhn.redhat.com/errata/RHSA-2015-1242.html","http://rhn.redhat.com/errata/RHSA-2015-1243.html","http://rhn.redhat.com/errata/RHSA-2015-1526.html","http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888","http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892","http://www-01.ibm.com/support/docview.wss?uid=swg21883640","http://www-304.ibm.com/support/docview.wss?uid=swg21903565","http://www-304.ibm.com/support/docview.wss?uid=swg21960015","http://www-304.ibm.com/support/docview.wss?uid=swg21960769","http://www.debian.org/security/2015/dsa-3316","http://www.debian.org/security/2015/dsa-3339","http://www.huawei.com/en/psirt/security-advisories/hw-454055","http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","http://www.securityfocus.com/bid/73684","http://www.securityfocus.com/bid/91787","http://www.securitytracker.com/id/1032599","http://www.securitytracker.com/id/1032600","http://www.securitytracker.com/id/1032707","http://www.securitytracker.com/id/1032708","http://www.securitytracker.com/id/1032734","http://www.securitytracker.com/id/1032788","http://www.securitytracker.com/id/1032858","http://www.securitytracker.com/id/1032868","http://www.securitytracker.com/id/1032910","http://www.securitytracker.com/id/1032990","http://www.securitytracker.com/id/1033071","http://www.securitytracker.com/id/1033072","http://www.securitytracker.com/id/1033386","http://www.securitytracker.com/id/1033415","http://www.securitytracker.com/id/1033431","http://www.securitytracker.com/id/1033432","http://www.securitytracker.com/id/1033737","http://www.securitytracker.com/id/1033769","http://www.securitytracker.com/id/1036222","http://www.ubuntu.com/usn/USN-2696-1","http://www.ubuntu.com/usn/USN-2706-1","http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm","https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789","https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650","https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888","https://kb.juniper.net/JSA10783","https://kc.mcafee.com/corporate/index?page=content&id=SB10163","https://security.gentoo.org/glsa/201512-10","https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709","https://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf","https://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-2808","description":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue."}]},{"artifact":{"id":"00bceaeaf4078fe2","cpes":["cpe:2.3:a:nss-tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-tools","purl":"pkg:rpm/centos/nss-tools@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2015-2808","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-2808","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2015-2808","date":"2026-10-08","epss":0.73851,"percentile":0.9947}],"risk":36.9255,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-2808","description":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue."},"relatedVulnerabilities":[{"id":"CVE-2015-2808","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2015-2808","date":"2026-10-08","epss":0.73851,"percentile":0.9947}],"urls":["http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034","http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html","http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html","http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html","http://marc.info/?l=bugtraq&m=143456209711959&w=2","http://marc.info/?l=bugtraq&m=143629696317098&w=2","http://marc.info/?l=bugtraq&m=143741441012338&w=2","http://marc.info/?l=bugtraq&m=143817021313142&w=2","http://marc.info/?l=bugtraq&m=143817899717054&w=2","http://marc.info/?l=bugtraq&m=143818140118771&w=2","http://marc.info/?l=bugtraq&m=144043644216842&w=2","http://marc.info/?l=bugtraq&m=144059660127919&w=2","http://marc.info/?l=bugtraq&m=144059703728085&w=2","http://marc.info/?l=bugtraq&m=144060576831314&w=2","http://marc.info/?l=bugtraq&m=144060606031437&w=2","http://marc.info/?l=bugtraq&m=144069189622016&w=2","http://marc.info/?l=bugtraq&m=144102017024820&w=2","http://marc.info/?l=bugtraq&m=144104533800819&w=2","http://marc.info/?l=bugtraq&m=144104565600964&w=2","http://marc.info/?l=bugtraq&m=144493176821532&w=2","http://rhn.redhat.com/errata/RHSA-2015-1006.html","http://rhn.redhat.com/errata/RHSA-2015-1007.html","http://rhn.redhat.com/errata/RHSA-2015-1020.html","http://rhn.redhat.com/errata/RHSA-2015-1021.html","http://rhn.redhat.com/errata/RHSA-2015-1091.html","http://rhn.redhat.com/errata/RHSA-2015-1228.html","http://rhn.redhat.com/errata/RHSA-2015-1229.html","http://rhn.redhat.com/errata/RHSA-2015-1230.html","http://rhn.redhat.com/errata/RHSA-2015-1241.html","http://rhn.redhat.com/errata/RHSA-2015-1242.html","http://rhn.redhat.com/errata/RHSA-2015-1243.html","http://rhn.redhat.com/errata/RHSA-2015-1526.html","http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888","http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892","http://www-01.ibm.com/support/docview.wss?uid=swg21883640","http://www-304.ibm.com/support/docview.wss?uid=swg21903565","http://www-304.ibm.com/support/docview.wss?uid=swg21960015","http://www-304.ibm.com/support/docview.wss?uid=swg21960769","http://www.debian.org/security/2015/dsa-3316","http://www.debian.org/security/2015/dsa-3339","http://www.huawei.com/en/psirt/security-advisories/hw-454055","http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","http://www.securityfocus.com/bid/73684","http://www.securityfocus.com/bid/91787","http://www.securitytracker.com/id/1032599","http://www.securitytracker.com/id/1032600","http://www.securitytracker.com/id/1032707","http://www.securitytracker.com/id/1032708","http://www.securitytracker.com/id/1032734","http://www.securitytracker.com/id/1032788","http://www.securitytracker.com/id/1032858","http://www.securitytracker.com/id/1032868","http://www.securitytracker.com/id/1032910","http://www.securitytracker.com/id/1032990","http://www.securitytracker.com/id/1033071","http://www.securitytracker.com/id/1033072","http://www.securitytracker.com/id/1033386","http://www.securitytracker.com/id/1033415","http://www.securitytracker.com/id/1033431","http://www.securitytracker.com/id/1033432","http://www.securitytracker.com/id/1033737","http://www.securitytracker.com/id/1033769","http://www.securitytracker.com/id/1036222","http://www.ubuntu.com/usn/USN-2696-1","http://www.ubuntu.com/usn/USN-2706-1","http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm","https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789","https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650","https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888","https://kb.juniper.net/JSA10783","https://kc.mcafee.com/corporate/index?page=content&id=SB10163","https://security.gentoo.org/glsa/201512-10","https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709","https://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf","https://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-2808","description":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2015-2808","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-2808","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2015-2808","date":"2026-10-08","epss":0.73851,"percentile":0.9947}],"risk":36.9255,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-2808","description":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue."},"relatedVulnerabilities":[{"id":"CVE-2015-2808","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2015-2808","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2015-2808","date":"2026-10-08","epss":0.73851,"percentile":0.9947}],"urls":["http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034","http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html","http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html","http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html","http://marc.info/?l=bugtraq&m=143456209711959&w=2","http://marc.info/?l=bugtraq&m=143629696317098&w=2","http://marc.info/?l=bugtraq&m=143741441012338&w=2","http://marc.info/?l=bugtraq&m=143817021313142&w=2","http://marc.info/?l=bugtraq&m=143817899717054&w=2","http://marc.info/?l=bugtraq&m=143818140118771&w=2","http://marc.info/?l=bugtraq&m=144043644216842&w=2","http://marc.info/?l=bugtraq&m=144059660127919&w=2","http://marc.info/?l=bugtraq&m=144059703728085&w=2","http://marc.info/?l=bugtraq&m=144060576831314&w=2","http://marc.info/?l=bugtraq&m=144060606031437&w=2","http://marc.info/?l=bugtraq&m=144069189622016&w=2","http://marc.info/?l=bugtraq&m=144102017024820&w=2","http://marc.info/?l=bugtraq&m=144104533800819&w=2","http://marc.info/?l=bugtraq&m=144104565600964&w=2","http://marc.info/?l=bugtraq&m=144493176821532&w=2","http://rhn.redhat.com/errata/RHSA-2015-1006.html","http://rhn.redhat.com/errata/RHSA-2015-1007.html","http://rhn.redhat.com/errata/RHSA-2015-1020.html","http://rhn.redhat.com/errata/RHSA-2015-1021.html","http://rhn.redhat.com/errata/RHSA-2015-1091.html","http://rhn.redhat.com/errata/RHSA-2015-1228.html","http://rhn.redhat.com/errata/RHSA-2015-1229.html","http://rhn.redhat.com/errata/RHSA-2015-1230.html","http://rhn.redhat.com/errata/RHSA-2015-1241.html","http://rhn.redhat.com/errata/RHSA-2015-1242.html","http://rhn.redhat.com/errata/RHSA-2015-1243.html","http://rhn.redhat.com/errata/RHSA-2015-1526.html","http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888","http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892","http://www-01.ibm.com/support/docview.wss?uid=swg21883640","http://www-304.ibm.com/support/docview.wss?uid=swg21903565","http://www-304.ibm.com/support/docview.wss?uid=swg21960015","http://www-304.ibm.com/support/docview.wss?uid=swg21960769","http://www.debian.org/security/2015/dsa-3316","http://www.debian.org/security/2015/dsa-3339","http://www.huawei.com/en/psirt/security-advisories/hw-454055","http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","http://www.securityfocus.com/bid/73684","http://www.securityfocus.com/bid/91787","http://www.securitytracker.com/id/1032599","http://www.securitytracker.com/id/1032600","http://www.securitytracker.com/id/1032707","http://www.securitytracker.com/id/1032708","http://www.securitytracker.com/id/1032734","http://www.securitytracker.com/id/1032788","http://www.securitytracker.com/id/1032858","http://www.securitytracker.com/id/1032868","http://www.securitytracker.com/id/1032910","http://www.securitytracker.com/id/1032990","http://www.securitytracker.com/id/1033071","http://www.securitytracker.com/id/1033072","http://www.securitytracker.com/id/1033386","http://www.securitytracker.com/id/1033415","http://www.securitytracker.com/id/1033431","http://www.securitytracker.com/id/1033432","http://www.securitytracker.com/id/1033737","http://www.securitytracker.com/id/1033769","http://www.securitytracker.com/id/1036222","http://www.ubuntu.com/usn/USN-2696-1","http://www.ubuntu.com/usn/USN-2706-1","http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm","https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246","https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789","https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650","https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888","https://kb.juniper.net/JSA10783","https://kc.mcafee.com/corporate/index?page=content&id=SB10163","https://security.gentoo.org/glsa/201512-10","https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709","https://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf","https://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-2808","description":"The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-6119","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2024-6119","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6119","cwe":"CWE-843","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-6119","cwe":"CWE-843","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-6119","date":"2026-10-08","epss":0.66582,"percentile":0.99272}],"risk":36.28719,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-6119","description":"A flaw was found in OpenSSL. Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process."},"relatedVulnerabilities":[{"id":"CVE-2024-6119","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-6119","cwe":"CWE-843","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2024-6119","cwe":"CWE-843","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-6119","date":"2026-10-08","epss":0.66582,"percentile":0.99272}],"urls":["https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f","https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6","https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2","https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0","https://openssl-library.org/news/secadv/20240903.txt","http://www.openwall.com/lists/oss-security/2024/09/03/4","https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html","https://security.netapp.com/advisory/ntap-20240912-0001/","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-6119","description":"Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-22.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-23840","versionConstraint":"< 1:1.0.2k-22.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-23840","fix":{"state":"fixed","versions":["1:1.0.2k-22.el7_9"],"available":[{"date":"2021-10-14","kind":"first-observed","version":"1:1.0.2k-22.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-23840","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-23840","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-23840","date":"2026-10-08","epss":0.50732,"percentile":0.98897}],"risk":31.7075,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:3798","link":"https://access.redhat.com/errata/RHSA-2021:3798"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-23840","description":"Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissible length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash."},"relatedVulnerabilities":[{"id":"CVE-2021-23840","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-23840","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-23840","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-23840","date":"2026-10-08","epss":0.50732,"percentile":0.98897}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2","https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846","https://kc.mcafee.com/corporate/index?page=content&id=SB10366","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/202103-03","https://security.netapp.com/advisory/ntap-20210219-0009/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://www.debian.org/security/2021/dsa-4855","https://www.openssl.org/news/secadv/20210216.txt","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.tenable.com/security/tns-2021-03","https://www.tenable.com/security/tns-2021-09","https://www.tenable.com/security/tns-2021-10"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-23840","description":"Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x)."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-23.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-3712","versionConstraint":"< 1:1.0.2k-23.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-3712","fix":{"state":"fixed","versions":["1:1.0.2k-23.el7_9"],"available":[{"date":"2022-01-12","kind":"first-observed","version":"1:1.0.2k-23.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-3712","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-3712","date":"2026-10-08","epss":0.50445,"percentile":0.98887}],"risk":31.275899999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:0064","link":"https://access.redhat.com/errata/RHSA-2022:0064"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3712","description":"It was found that openssl assumed ASN.1 strings to be NUL terminated. A malicious actor may be able to force an application into calling openssl function with a specially crafted, non-NUL terminated string to deliberately hit this bug, which may result in a crash of the application, causing a Denial of Service attack, or possibly, memory disclosure. The highest threat from this vulnerability is to data confidentiality and system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3712","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","metrics":{"baseScore":5.8,"impactScore":5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-3712","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-3712","date":"2026-10-08","epss":0.50445,"percentile":0.98887}],"urls":["http://www.openwall.com/lists/oss-security/2021/08/26/2","https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12","https://kc.mcafee.com/corporate/index?page=content&id=SB10366","https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html","https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html","https://security.gentoo.org/glsa/202209-02","https://security.gentoo.org/glsa/202210-02","https://security.netapp.com/advisory/ntap-20210827-0010/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://www.debian.org/security/2021/dsa-4963","https://www.openssl.org/news/secadv/20210824.txt","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.tenable.com/security/tns-2021-16","https://www.tenable.com/security/tns-2022-02","https://cert-portal.siemens.com/productcert/html/ssa-019200.html","https://cert-portal.siemens.com/productcert/html/ssa-028723.html","https://cert-portal.siemens.com/productcert/html/ssa-244969.html","https://cert-portal.siemens.com/productcert/html/ssa-389290.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3712","description":"ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own \"d2i\" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the \"data\" and \"length\" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the \"data\" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y)."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-14.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-25236","versionConstraint":"< 0:2.1.0-14.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-25236","fix":{"state":"fixed","versions":["0:2.1.0-14.el7_9"],"available":[{"date":"2022-03-29","kind":"first-observed","version":"0:2.1.0-14.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-25236","cwe":"CWE-668","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-25236","cwe":"CWE-668","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-25236","date":"2026-10-08","epss":0.34174,"percentile":0.9837}],"risk":29.56051,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:1069","link":"https://access.redhat.com/errata/RHSA-2022:1069"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-25236","description":"A flaw was found in expat. Passing one or more namespace separator characters in the \"xmlns[:prefix]\" attribute values made expat send malformed tag names to the XML processor on top of expat. This issue causes arbitrary code execution depending on how unexpected cases are handled inside the XML processor."},"relatedVulnerabilities":[{"id":"CVE-2022-25236","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-25236","cwe":"CWE-668","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-25236","cwe":"CWE-668","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-25236","date":"2026-10-08","epss":0.34174,"percentile":0.9837}],"urls":["http://packetstormsecurity.com/files/167238/Zoom-XMPP-Stanza-Smuggling-Remote-Code-Execution.html","http://www.openwall.com/lists/oss-security/2022/02/19/1","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://github.com/libexpat/libexpat/pull/561","https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","https://security.gentoo.org/glsa/202209-24","https://security.netapp.com/advisory/ntap-20220303-0008/","https://www.debian.org/security/2022/dsa-5085","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-25236","description":"xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs."}]},{"artifact":{"id":"2439f8bce118b50f","cpes":["cpe:2.3:a:centos:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*"],"name":"sqlite","purl":"pkg:rpm/centos/sqlite@3.7.17-8.el7?arch=x86_64&distro=centos-7&upstream=sqlite-3.7.17-8.el7.src.rpm","type":"rpm","version":"3.7.17-8.el7","language":"","licenses":["Public Domain"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-8457","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"sqlite","version":"0:3.7.17-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-8457","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-8457","cwe":"CWE-125","type":"Secondary","source":"cve@checkpoint.com"},{"cve":"CVE-2019-8457","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-8457","date":"2026-10-08","epss":0.45426,"percentile":0.98761}],"risk":28.39125,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-8457","description":"SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables."},"relatedVulnerabilities":[{"id":"CVE-2019-8457","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-8457","cwe":"CWE-125","type":"Secondary","source":"cve@checkpoint.com"},{"cve":"CVE-2019-8457","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-8457","date":"2026-10-08","epss":0.45426,"percentile":0.98761}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00074.html","https://kc.mcafee.com/corporate/index?page=content&id=SB10365","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPKYSWCOM3CL66RI76TYVIG6TJ263RXH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SJPFGA45DI4F5MCF2OAACGH3HQOF4G3M/","https://security.netapp.com/advisory/ntap-20190606-0002/","https://usn.ubuntu.com/4004-1/","https://usn.ubuntu.com/4004-2/","https://usn.ubuntu.com/4019-1/","https://usn.ubuntu.com/4019-2/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://www.sqlite.org/releaselog/3_28_0.html","https://www.sqlite.org/src/info/90acdbfce9c08858"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-8457","description":"SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-40303","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-40303","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40303","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-40303","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-40303","date":"2026-10-08","epss":0.41365,"percentile":0.98641}],"risk":25.853125,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-40303","description":"A flaw was found in libxml2. Parsing a XML document with the XML_PARSE_HUGE option enabled can result in an integer overflow because safety checks were missing in some functions. Also, the xmlParseEntityValue function didn't have any length limitation."},"relatedVulnerabilities":[{"id":"CVE-2022-40303","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40303","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-40303","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-40303","date":"2026-10-08","epss":0.41365,"percentile":0.98641}],"urls":["http://seclists.org/fulldisclosure/2022/Dec/21","http://seclists.org/fulldisclosure/2022/Dec/24","http://seclists.org/fulldisclosure/2022/Dec/25","http://seclists.org/fulldisclosure/2022/Dec/26","http://seclists.org/fulldisclosure/2022/Dec/27","https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0","https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3","https://security.netapp.com/advisory/ntap-20221209-0003/","https://support.apple.com/kb/HT213531","https://support.apple.com/kb/HT213533","https://support.apple.com/kb/HT213534","https://support.apple.com/kb/HT213535","https://support.apple.com/kb/HT213536"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-40303","description":"An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-40303","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-40303","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40303","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-40303","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-40303","date":"2026-10-08","epss":0.41365,"percentile":0.98641}],"risk":25.853125,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-40303","description":"A flaw was found in libxml2. Parsing a XML document with the XML_PARSE_HUGE option enabled can result in an integer overflow because safety checks were missing in some functions. Also, the xmlParseEntityValue function didn't have any length limitation."},"relatedVulnerabilities":[{"id":"CVE-2022-40303","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40303","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-40303","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-40303","date":"2026-10-08","epss":0.41365,"percentile":0.98641}],"urls":["http://seclists.org/fulldisclosure/2022/Dec/21","http://seclists.org/fulldisclosure/2022/Dec/24","http://seclists.org/fulldisclosure/2022/Dec/25","http://seclists.org/fulldisclosure/2022/Dec/26","http://seclists.org/fulldisclosure/2022/Dec/27","https://gitlab.gnome.org/GNOME/libxml2/-/commit/c846986356fc149915a74972bf198abc266bc2c0","https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3","https://security.netapp.com/advisory/ntap-20221209-0003/","https://support.apple.com/kb/HT213531","https://support.apple.com/kb/HT213533","https://support.apple.com/kb/HT213534","https://support.apple.com/kb/HT213535","https://support.apple.com/kb/HT213536"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-40303","description":"An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-57.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-5436","versionConstraint":"< 0:7.29.0-57.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-5436","fix":{"state":"fixed","versions":["0:7.29.0-57.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-57.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-5436","cwe":"CWE-122","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2019-5436","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-5436","date":"2026-10-08","epss":0.49739,"percentile":0.9887}],"risk":24.8695,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1020","link":"https://access.redhat.com/errata/RHSA-2020:1020"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-5436","description":"A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1."},"relatedVulnerabilities":[{"id":"CVE-2019-5436","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":4.6,"impactScore":6.5,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-5436","cwe":"CWE-122","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2019-5436","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-5436","date":"2026-10-08","epss":0.49739,"percentile":0.9887}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00008.html","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00017.html","http://www.openwall.com/lists/oss-security/2019/09/11/6","https://curl.haxx.se/docs/CVE-2019-5436.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SMG3V4VTX2SE3EW3HQTN3DDLQBTORQC2/","https://seclists.org/bugtraq/2020/Feb/36","https://security.gentoo.org/glsa/202003-29","https://security.netapp.com/advisory/ntap-20190606-0004/","https://support.f5.com/csp/article/K55133295","https://support.f5.com/csp/article/K55133295?utm_source=f5support&amp%3Butm_medium=RSS","https://www.debian.org/security/2020/dsa-4633","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-5436","description":"A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-57.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-5436","versionConstraint":"< 0:7.29.0-57.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-5436","fix":{"state":"fixed","versions":["0:7.29.0-57.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-57.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-5436","cwe":"CWE-122","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2019-5436","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-5436","date":"2026-10-08","epss":0.49739,"percentile":0.9887}],"risk":24.8695,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1020","link":"https://access.redhat.com/errata/RHSA-2020:1020"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-5436","description":"A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1."},"relatedVulnerabilities":[{"id":"CVE-2019-5436","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":4.6,"impactScore":6.5,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-5436","cwe":"CWE-122","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2019-5436","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-5436","date":"2026-10-08","epss":0.49739,"percentile":0.9887}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00008.html","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00017.html","http://www.openwall.com/lists/oss-security/2019/09/11/6","https://curl.haxx.se/docs/CVE-2019-5436.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SMG3V4VTX2SE3EW3HQTN3DDLQBTORQC2/","https://seclists.org/bugtraq/2020/Feb/36","https://security.gentoo.org/glsa/202003-29","https://security.netapp.com/advisory/ntap-20190606-0004/","https://support.f5.com/csp/article/K55133295","https://support.f5.com/csp/article/K55133295?utm_source=f5support&amp%3Butm_medium=RSS","https://www.debian.org/security/2020/dsa-4633","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-5436","description":"A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1."}]},{"artifact":{"id":"e5ab675da5cb289c","cpes":["cpe:2.3:a:centos:nspr:4.13.1-1.0.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:nspr:nspr:4.13.1-1.0.el7_3:*:*:*:*:*:*:*"],"name":"nspr","purl":"pkg:rpm/centos/nspr@4.13.1-1.0.el7_3?arch=x86_64&distro=centos-7&upstream=nspr-4.13.1-1.0.el7_3.src.rpm","type":"rpm","version":"4.13.1-1.0.el7_3","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:4.21.0-1.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-12404","versionConstraint":"< 0:4.21.0-1.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nspr","version":"0:4.13.1-1.0.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-12404","fix":{"state":"fixed","versions":["0:4.21.0-1.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:4.21.0-1.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12404","date":"2026-10-08","epss":0.44248,"percentile":0.98726}],"risk":24.115160000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2237","link":"https://access.redhat.com/errata/RHSA-2019:2237"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-12404","description":"A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41."},"relatedVulnerabilities":[{"id":"CVE-2018-12404","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12404","date":"2026-10-08","epss":0.44248,"percentile":0.98726}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html","http://www.securityfocus.com/bid/107260","https://access.redhat.com/errata/RHSA-2019:2237","https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-12404","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-12404","description":"A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41."}]},{"artifact":{"id":"a46b4702cba559de","cpes":["cpe:2.3:a:centos:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss","purl":"pkg:rpm/centos/nss@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-4.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-12404","versionConstraint":"< 0:3.44.0-4.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"0:3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-12404","fix":{"state":"fixed","versions":["0:3.44.0-4.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:3.44.0-4.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12404","date":"2026-10-08","epss":0.44248,"percentile":0.98726}],"risk":24.115160000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2237","link":"https://access.redhat.com/errata/RHSA-2019:2237"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-12404","description":"A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41."},"relatedVulnerabilities":[{"id":"CVE-2018-12404","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12404","date":"2026-10-08","epss":0.44248,"percentile":0.98726}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html","http://www.securityfocus.com/bid/107260","https://access.redhat.com/errata/RHSA-2019:2237","https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-12404","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-12404","description":"A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41."}]},{"artifact":{"id":"92876d71e73259d4","cpes":["cpe:2.3:a:nss-softokn:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*"],"name":"nss-softokn","purl":"pkg:rpm/centos/nss-softokn@3.28.3-8.el7_4?arch=x86_64&distro=centos-7&upstream=nss-softokn-3.28.3-8.el7_4.src.rpm","type":"rpm","version":"3.28.3-8.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-5.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-12404","versionConstraint":"< 0:3.44.0-5.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-softokn","version":"0:3.28.3-8.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-12404","fix":{"state":"fixed","versions":["0:3.44.0-5.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:3.44.0-5.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12404","date":"2026-10-08","epss":0.44248,"percentile":0.98726}],"risk":24.115160000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2237","link":"https://access.redhat.com/errata/RHSA-2019:2237"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-12404","description":"A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41."},"relatedVulnerabilities":[{"id":"CVE-2018-12404","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12404","date":"2026-10-08","epss":0.44248,"percentile":0.98726}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html","http://www.securityfocus.com/bid/107260","https://access.redhat.com/errata/RHSA-2019:2237","https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-12404","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-12404","description":"A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41."}]},{"artifact":{"id":"25cd735f603572c2","cpes":["cpe:2.3:a:nss-softokn-freebl:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn-freebl:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn_freebl:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn_freebl:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*"],"name":"nss-softokn-freebl","purl":"pkg:rpm/centos/nss-softokn-freebl@3.28.3-8.el7_4?arch=x86_64&distro=centos-7&upstream=nss-softokn-3.28.3-8.el7_4.src.rpm","type":"rpm","version":"3.28.3-8.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss-softokn","version":"3.28.3-8.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-5.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-12404","versionConstraint":"< 0:3.44.0-5.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-softokn","version":"3.28.3-8.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-12404","fix":{"state":"fixed","versions":["0:3.44.0-5.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:3.44.0-5.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12404","date":"2026-10-08","epss":0.44248,"percentile":0.98726}],"risk":24.115160000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2237","link":"https://access.redhat.com/errata/RHSA-2019:2237"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-12404","description":"A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41."},"relatedVulnerabilities":[{"id":"CVE-2018-12404","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12404","date":"2026-10-08","epss":0.44248,"percentile":0.98726}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html","http://www.securityfocus.com/bid/107260","https://access.redhat.com/errata/RHSA-2019:2237","https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-12404","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-12404","description":"A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41."}]},{"artifact":{"id":"4f9adc24f7b50922","cpes":["cpe:2.3:a:nss-sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-sysinit","purl":"pkg:rpm/centos/nss-sysinit@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-4.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-12404","versionConstraint":"< 0:3.44.0-4.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-12404","fix":{"state":"fixed","versions":["0:3.44.0-4.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:3.44.0-4.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12404","date":"2026-10-08","epss":0.44248,"percentile":0.98726}],"risk":24.115160000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2237","link":"https://access.redhat.com/errata/RHSA-2019:2237"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-12404","description":"A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41."},"relatedVulnerabilities":[{"id":"CVE-2018-12404","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12404","date":"2026-10-08","epss":0.44248,"percentile":0.98726}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html","http://www.securityfocus.com/bid/107260","https://access.redhat.com/errata/RHSA-2019:2237","https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-12404","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-12404","description":"A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41."}]},{"artifact":{"id":"00bceaeaf4078fe2","cpes":["cpe:2.3:a:nss-tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-tools","purl":"pkg:rpm/centos/nss-tools@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-4.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-12404","versionConstraint":"< 0:3.44.0-4.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-12404","fix":{"state":"fixed","versions":["0:3.44.0-4.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:3.44.0-4.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12404","date":"2026-10-08","epss":0.44248,"percentile":0.98726}],"risk":24.115160000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2237","link":"https://access.redhat.com/errata/RHSA-2019:2237"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-12404","description":"A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41."},"relatedVulnerabilities":[{"id":"CVE-2018-12404","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12404","date":"2026-10-08","epss":0.44248,"percentile":0.98726}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html","http://www.securityfocus.com/bid/107260","https://access.redhat.com/errata/RHSA-2019:2237","https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-12404","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-12404","description":"A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41."}]},{"artifact":{"id":"4b9171b2fdf0504a","cpes":["cpe:2.3:a:nss-util:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss-util:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_util:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_util:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*"],"name":"nss-util","purl":"pkg:rpm/centos/nss-util@3.28.4-3.el7?arch=x86_64&distro=centos-7&upstream=nss-util-3.28.4-3.el7.src.rpm","type":"rpm","version":"3.28.4-3.el7","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-3.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-12404","versionConstraint":"< 0:3.44.0-3.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-util","version":"0:3.28.4-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-12404","fix":{"state":"fixed","versions":["0:3.44.0-3.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:3.44.0-3.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12404","date":"2026-10-08","epss":0.44248,"percentile":0.98726}],"risk":24.115160000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2237","link":"https://access.redhat.com/errata/RHSA-2019:2237"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-12404","description":"A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41."},"relatedVulnerabilities":[{"id":"CVE-2018-12404","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12404","date":"2026-10-08","epss":0.44248,"percentile":0.98726}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html","http://www.securityfocus.com/bid/107260","https://access.redhat.com/errata/RHSA-2019:2237","https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2018-12404","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-12404","description":"A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-16.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-0732","versionConstraint":"< 1:1.0.2k-16.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-0732","fix":{"state":"fixed","versions":["1:1.0.2k-16.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"1:1.0.2k-16.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-0732","cwe":"CWE-320","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-0732","date":"2026-10-08","epss":0.48831,"percentile":0.98849}],"risk":22.706415,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3221","link":"https://access.redhat.com/errata/RHSA-2018:3221"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-0732","description":"During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o)."},"relatedVulnerabilities":[{"id":"CVE-2018-0732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-0732","cwe":"CWE-320","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-0732","date":"2026-10-08","epss":0.48831,"percentile":0.98849}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/104442","http://www.securitytracker.com/id/1041090","https://access.redhat.com/errata/RHSA-2018:2552","https://access.redhat.com/errata/RHSA-2018:2553","https://access.redhat.com/errata/RHSA-2018:3221","https://access.redhat.com/errata/RHSA-2018:3505","https://access.redhat.com/errata/RHSA-2019:1296","https://access.redhat.com/errata/RHSA-2019:1297","https://access.redhat.com/errata/RHSA-2019:1543","https://cert-portal.siemens.com/productcert/pdf/ssa-419820.pdf","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3984ef0b72831da8b3ece4745cac4f8575b19098","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ea7abeeabf92b7aca160bdd0208636d4da69f4f4","https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/","https://security.gentoo.org/glsa/201811-03","https://security.netapp.com/advisory/ntap-20181105-0001/","https://security.netapp.com/advisory/ntap-20190118-0002/","https://securityadvisories.paloaltonetworks.com/Home/Detail/133","https://usn.ubuntu.com/3692-1/","https://usn.ubuntu.com/3692-2/","https://www.debian.org/security/2018/dsa-4348","https://www.debian.org/security/2018/dsa-4355","https://www.openssl.org/news/secadv/20180612.txt","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://www.tenable.com/security/tns-2018-12","https://www.tenable.com/security/tns-2018-13","https://www.tenable.com/security/tns-2018-14","https://www.tenable.com/security/tns-2018-17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-0732","description":"During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o)."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-2398","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2024-2398","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2398","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-2398","date":"2026-10-08","epss":0.36081,"percentile":0.98442}],"risk":22.550625000000004,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-2398","description":"A flaw was found in curl. When an application configures libcurl to use HTTP/2 server push and the amount of received headers for the push surpasses the maximum allowed limit, libcurl aborts the server push. When aborting, libcurl does not free all the previously allocated headers, resulting in a memory leak."},"relatedVulnerabilities":[{"id":"CVE-2024-2398","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2398","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-2398","date":"2026-10-08","epss":0.36081,"percentile":0.98442}],"urls":["http://seclists.org/fulldisclosure/2024/Jul/18","http://seclists.org/fulldisclosure/2024/Jul/19","http://seclists.org/fulldisclosure/2024/Jul/20","http://www.openwall.com/lists/oss-security/2024/03/27/3","https://curl.se/docs/CVE-2024-2398.html","https://curl.se/docs/CVE-2024-2398.json","https://hackerone.com/reports/2402845","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/","https://security.netapp.com/advisory/ntap-20240503-0009/","https://support.apple.com/kb/HT214118","https://support.apple.com/kb/HT214119","https://support.apple.com/kb/HT214120"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2398","description":"When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-2398","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2024-2398","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2398","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-2398","date":"2026-10-08","epss":0.36081,"percentile":0.98442}],"risk":22.550625000000004,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-2398","description":"A flaw was found in curl. When an application configures libcurl to use HTTP/2 server push and the amount of received headers for the push surpasses the maximum allowed limit, libcurl aborts the server push. When aborting, libcurl does not free all the previously allocated headers, resulting in a memory leak."},"relatedVulnerabilities":[{"id":"CVE-2024-2398","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-2398","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-2398","date":"2026-10-08","epss":0.36081,"percentile":0.98442}],"urls":["http://seclists.org/fulldisclosure/2024/Jul/18","http://seclists.org/fulldisclosure/2024/Jul/19","http://seclists.org/fulldisclosure/2024/Jul/20","http://www.openwall.com/lists/oss-security/2024/03/27/3","https://curl.se/docs/CVE-2024-2398.html","https://curl.se/docs/CVE-2024-2398.json","https://hackerone.com/reports/2402845","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D44YLAUFJU6BZ4XFG2FYV7SBKXB5IZ6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMD6UYKCCRCYETWQZUJ65ZRFULT6SHLI/","https://security.netapp.com/advisory/ntap-20240503-0009/","https://support.apple.com/kb/HT214118","https://support.apple.com/kb/HT214119","https://support.apple.com/kb/HT214120"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-2398","description":"When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory.  Further, this error condition fails silently and is therefore not easily detected by an application."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-23336","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-23336","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-23336","cwe":"CWE-444","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-23336","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-23336","date":"2026-10-08","epss":0.40736,"percentile":0.98622}],"risk":22.201120000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-23336","description":"The package python/cpython is vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter."},"relatedVulnerabilities":[{"id":"CVE-2021-23336","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","metrics":{"baseScore":4,"impactScore":5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"report@snyk.io","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-23336","cwe":"CWE-444","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-23336","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-23336","date":"2026-10-08","epss":0.40736,"percentile":0.98622}],"urls":["http://www.openwall.com/lists/oss-security/2021/02/19/4","http://www.openwall.com/lists/oss-security/2021/05/01/2","https://github.com/python/cpython/pull/24297","https://lists.apache.org/thread.html/ra8ce70088ba291f358e077cafdb14d174b7a1ce9a9d86d1b332d6367%40%3Cusers.airflow.apache.org%3E","https://lists.apache.org/thread.html/rc005f4de9d9b0ba943ceb8ff5a21a5c6ff8a9df52632476698d99432%40%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/02/msg00030.html","https://lists.debian.org/debian-lts-announce/2021/04/msg00005.html","https://lists.debian.org/debian-lts-announce/2021/04/msg00015.html","https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3EPYWWFDV22CJ5AOH5VCE72DOASZZ255/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YKKDLXL3UEZ3J426C2XTBS63AHE46SM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46N6A52EGSXHJYCZWVMBJJIH4NWIV2B5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FONHJIOZOFD7CD35KZL6SVBUTMBPGZGA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCQTCSP6SCVIYNIRUJC5X7YBVUHPLSC4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZTM7KLHFCE3LWSEVO2NAFLUHMGYMCRY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IHQDU7NXA7EWAE4W7VO6MURVJIULEPPR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJXCMHLY7H3FIYLE4OKDYUILU2CCRUCZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LVNH6Z24IG3E67ZCQGGJ46FZB4XFLQNZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MNUN5SOMFL2BBKP6ZAICIIUPQKZDMGYO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MP572OLHMS7MZO4KUPSCIMSZIA5IZZ62/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6VXJZSZ6N64AILJX4CTMACYGQGHHD5C/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJSCSN722JO2E2AGPWD4NTGVELVRPB4R/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NODWHDIFBQE5RU5PUWUVE47JOT5VCMJ2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OAGSWNGZJ6HQ5ISA67SNMK3CJRKICET7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RSLQD5CCM75IZGAMBDGUZEATYU5YSGJ7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGIY6I4YS3WOXAK4SXKIEOC2G4VZKIR7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFTELUMWZE3KV3JB2H5EE6VFRZFRD5MV/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W2LSKBEFI5SYEY5FM6ICZVZM5WRQUCS4/","https://security.gentoo.org/glsa/202104-04","https://security.netapp.com/advisory/ntap-20210326-0004/","https://snyk.io/blog/cache-poisoning-in-popular-open-source-packages/","https://snyk.io/vuln/SNYK-UPSTREAM-PYTHONCPYTHON-1074933","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-23336","description":"The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-23336","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-23336","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-23336","cwe":"CWE-444","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-23336","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-23336","date":"2026-10-08","epss":0.40736,"percentile":0.98622}],"risk":22.201120000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-23336","description":"The package python/cpython is vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter."},"relatedVulnerabilities":[{"id":"CVE-2021-23336","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P","metrics":{"baseScore":4,"impactScore":5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"report@snyk.io","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-23336","cwe":"CWE-444","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-23336","cwe":"CWE-444","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-23336","date":"2026-10-08","epss":0.40736,"percentile":0.98622}],"urls":["http://www.openwall.com/lists/oss-security/2021/02/19/4","http://www.openwall.com/lists/oss-security/2021/05/01/2","https://github.com/python/cpython/pull/24297","https://lists.apache.org/thread.html/ra8ce70088ba291f358e077cafdb14d174b7a1ce9a9d86d1b332d6367%40%3Cusers.airflow.apache.org%3E","https://lists.apache.org/thread.html/rc005f4de9d9b0ba943ceb8ff5a21a5c6ff8a9df52632476698d99432%40%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/02/msg00030.html","https://lists.debian.org/debian-lts-announce/2021/04/msg00005.html","https://lists.debian.org/debian-lts-announce/2021/04/msg00015.html","https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3EPYWWFDV22CJ5AOH5VCE72DOASZZ255/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YKKDLXL3UEZ3J426C2XTBS63AHE46SM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46N6A52EGSXHJYCZWVMBJJIH4NWIV2B5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FONHJIOZOFD7CD35KZL6SVBUTMBPGZGA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCQTCSP6SCVIYNIRUJC5X7YBVUHPLSC4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZTM7KLHFCE3LWSEVO2NAFLUHMGYMCRY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IHQDU7NXA7EWAE4W7VO6MURVJIULEPPR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJXCMHLY7H3FIYLE4OKDYUILU2CCRUCZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LVNH6Z24IG3E67ZCQGGJ46FZB4XFLQNZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MNUN5SOMFL2BBKP6ZAICIIUPQKZDMGYO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MP572OLHMS7MZO4KUPSCIMSZIA5IZZ62/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6VXJZSZ6N64AILJX4CTMACYGQGHHD5C/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJSCSN722JO2E2AGPWD4NTGVELVRPB4R/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NODWHDIFBQE5RU5PUWUVE47JOT5VCMJ2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OAGSWNGZJ6HQ5ISA67SNMK3CJRKICET7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RSLQD5CCM75IZGAMBDGUZEATYU5YSGJ7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGIY6I4YS3WOXAK4SXKIEOC2G4VZKIR7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFTELUMWZE3KV3JB2H5EE6VFRZFRD5MV/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W2LSKBEFI5SYEY5FM6ICZVZM5WRQUCS4/","https://security.gentoo.org/glsa/202104-04","https://security.netapp.com/advisory/ntap-20210326-0004/","https://snyk.io/blog/cache-poisoning-in-popular-open-source-packages/","https://snyk.io/vuln/SNYK-UPSTREAM-PYTHONCPYTHON-1074933","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-23336","description":"The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.9.4-51.el7_4.2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-3145","versionConstraint":"< 32:9.9.4-51.el7_4.2 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-3145","fix":{"state":"fixed","versions":["32:9.9.4-51.el7_4.2"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"32:9.9.4-51.el7_4.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-3145","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-3145","date":"2026-10-08","epss":0.2793,"percentile":0.98058}],"risk":20.947499999999998,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0102","link":"https://access.redhat.com/errata/RHSA-2018:0102"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-3145","description":"A use-after-free flaw leading to denial of service was found in the way BIND internally handled cleanup operations on upstream recursion fetch contexts. A remote attacker could potentially use this flaw to make named, acting as a DNSSEC validating resolver, exit unexpectedly with an assertion failure via a specially crafted DNS request."},"relatedVulnerabilities":[{"id":"CVE-2017-3145","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-3145","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-3145","date":"2026-10-08","epss":0.2793,"percentile":0.98058}],"urls":["http://www.securityfocus.com/bid/102716","http://www.securitytracker.com/id/1040195","https://access.redhat.com/errata/RHSA-2018:0101","https://access.redhat.com/errata/RHSA-2018:0102","https://access.redhat.com/errata/RHSA-2018:0487","https://access.redhat.com/errata/RHSA-2018:0488","https://kb.isc.org/docs/aa-01542","https://lists.debian.org/debian-lts-announce/2018/01/msg00029.html","https://security.netapp.com/advisory/ntap-20180117-0003/","https://supportportal.juniper.net/s/article/2018-07-Security-Bulletin-SRX-Series-Vulnerabilities-in-ISC-BIND-named","https://www.debian.org/security/2018/dsa-4089"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-3145","description":"BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affects BIND 9.0.0 to 9.8.x, 9.9.0 to 9.9.11, 9.10.0 to 9.10.6, 9.11.0 to 9.11.2, 9.9.3-S1 to 9.9.11-S1, 9.10.5-S1 to 9.10.6-S1, 9.12.0a1 to 9.12.0rc1."}]},{"artifact":{"id":"2439f8bce118b50f","cpes":["cpe:2.3:a:centos:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*"],"name":"sqlite","purl":"pkg:rpm/centos/sqlite@3.7.17-8.el7?arch=x86_64&distro=centos-7&upstream=sqlite-3.7.17-8.el7.src.rpm","type":"rpm","version":"3.7.17-8.el7","language":"","licenses":["Public Domain"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-7036","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"sqlite","version":"0:3.7.17-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-7036","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-7036","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-7036","date":"2026-10-08","epss":0.39286,"percentile":0.98571}],"risk":19.643,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-7036","description":"The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a SQL command that triggers an API call with a crafted pointer value in the second argument."},"relatedVulnerabilities":[{"id":"CVE-2015-7036","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-7036","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-7036","date":"2026-10-08","epss":0.39286,"percentile":0.98571}],"urls":["http://support.apple.com/kb/HT204941","http://support.apple.com/kb/HT204942","http://zerodayinitiative.com/advisories/ZDI-15-570/","https://security.gentoo.org/glsa/201612-21"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-7036","description":"The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a SQL command that triggers an API call with a crafted pointer value in the second argument."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-6170","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-6170","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-6170","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-6170","date":"2026-10-08","epss":0.40937,"percentile":0.98626}],"risk":19.445075,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-6170","description":"It was found that bind does not implement reasonable restrictions for zone sizes. This allows an explicitly configured primary DNS server for a zone to crash a secondary DNS server, affecting service of other zones hosted on the same secondary server."},"relatedVulnerabilities":[{"id":"CVE-2016-6170","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-6170","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-6170","date":"2026-10-08","epss":0.40937,"percentile":0.98626}],"urls":["http://www.openwall.com/lists/oss-security/2016/07/06/3","http://www.securityfocus.com/bid/91611","http://www.securitytracker.com/id/1036241","https://bugzilla.redhat.com/show_bug.cgi?id=1353563","https://github.com/sischkg/xfer-limit/blob/master/README.md","https://kb.isc.org/article/AA-01390","https://kb.isc.org/article/AA-01390/169/CVE-2016-6170","https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.html","https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015073.html","https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015075.html","https://security.gentoo.org/glsa/201610-07"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-6170","description":"ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary DNS servers to cause a denial of service (secondary DNS server crash) via a large AXFR response, and possibly allows IXFR servers to cause a denial of service (IXFR client crash) via a large IXFR response and allows remote authenticated users to cause a denial of service (primary DNS server crash) via a large UPDATE message."}]},{"artifact":{"id":"a46b4702cba559de","cpes":["cpe:2.3:a:centos:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss","purl":"pkg:rpm/centos/nss@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.67.0-4.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-43527","versionConstraint":"< 0:3.67.0-4.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"0:3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-43527","fix":{"state":"fixed","versions":["0:3.67.0-4.el7_9"],"available":[{"date":"2021-12-02","kind":"first-observed","version":"0:3.67.0-4.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-43527","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-43527","date":"2026-10-08","epss":0.17563,"percentile":0.97071}],"risk":16.509220000000003,"urls":[],"severity":"Critical","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:4904","link":"https://access.redhat.com/errata/RHSA-2021:4904"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-43527","description":"A remote code execution flaw was found in the way NSS verifies certificates. This flaw allows an attacker posing as an SSL/TLS server to trigger this issue in a client application compiled with NSS when it tries to initiate an SSL/TLS connection.  Similarly, a server application compiled with NSS, which processes client certificates, can receive a malicious certificate via a client, triggering the flaw. The highest threat to this vulnerability is confidentiality, integrity, as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-43527","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-43527","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-43527","date":"2026-10-08","epss":0.17563,"percentile":0.97071}],"urls":["https://bugzilla.mozilla.org/show_bug.cgi?id=1737470","https://cert-portal.siemens.com/productcert/pdf/ssa-594438.pdf","https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_68_1_RTM/","https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_73_RTM/","https://security.gentoo.org/glsa/202212-05","https://security.netapp.com/advisory/ntap-20211229-0002/","https://www.mozilla.org/security/advisories/mfsa2021-51/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.starwindsoftware.com/security/sw-20220802-0001/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-43527","description":"NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \\#7, or PKCS \\#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1."}]},{"artifact":{"id":"4f9adc24f7b50922","cpes":["cpe:2.3:a:nss-sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-sysinit","purl":"pkg:rpm/centos/nss-sysinit@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.67.0-4.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-43527","versionConstraint":"< 0:3.67.0-4.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-43527","fix":{"state":"fixed","versions":["0:3.67.0-4.el7_9"],"available":[{"date":"2021-12-02","kind":"first-observed","version":"0:3.67.0-4.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-43527","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-43527","date":"2026-10-08","epss":0.17563,"percentile":0.97071}],"risk":16.509220000000003,"urls":[],"severity":"Critical","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:4904","link":"https://access.redhat.com/errata/RHSA-2021:4904"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-43527","description":"A remote code execution flaw was found in the way NSS verifies certificates. This flaw allows an attacker posing as an SSL/TLS server to trigger this issue in a client application compiled with NSS when it tries to initiate an SSL/TLS connection.  Similarly, a server application compiled with NSS, which processes client certificates, can receive a malicious certificate via a client, triggering the flaw. The highest threat to this vulnerability is confidentiality, integrity, as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-43527","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-43527","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-43527","date":"2026-10-08","epss":0.17563,"percentile":0.97071}],"urls":["https://bugzilla.mozilla.org/show_bug.cgi?id=1737470","https://cert-portal.siemens.com/productcert/pdf/ssa-594438.pdf","https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_68_1_RTM/","https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_73_RTM/","https://security.gentoo.org/glsa/202212-05","https://security.netapp.com/advisory/ntap-20211229-0002/","https://www.mozilla.org/security/advisories/mfsa2021-51/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.starwindsoftware.com/security/sw-20220802-0001/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-43527","description":"NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \\#7, or PKCS \\#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1."}]},{"artifact":{"id":"00bceaeaf4078fe2","cpes":["cpe:2.3:a:nss-tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-tools","purl":"pkg:rpm/centos/nss-tools@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.67.0-4.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-43527","versionConstraint":"< 0:3.67.0-4.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-43527","fix":{"state":"fixed","versions":["0:3.67.0-4.el7_9"],"available":[{"date":"2021-12-02","kind":"first-observed","version":"0:3.67.0-4.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-43527","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-43527","date":"2026-10-08","epss":0.17563,"percentile":0.97071}],"risk":16.509220000000003,"urls":[],"severity":"Critical","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:4904","link":"https://access.redhat.com/errata/RHSA-2021:4904"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-43527","description":"A remote code execution flaw was found in the way NSS verifies certificates. This flaw allows an attacker posing as an SSL/TLS server to trigger this issue in a client application compiled with NSS when it tries to initiate an SSL/TLS connection.  Similarly, a server application compiled with NSS, which processes client certificates, can receive a malicious certificate via a client, triggering the flaw. The highest threat to this vulnerability is confidentiality, integrity, as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-43527","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-43527","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-43527","date":"2026-10-08","epss":0.17563,"percentile":0.97071}],"urls":["https://bugzilla.mozilla.org/show_bug.cgi?id=1737470","https://cert-portal.siemens.com/productcert/pdf/ssa-594438.pdf","https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_68_1_RTM/","https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_73_RTM/","https://security.gentoo.org/glsa/202212-05","https://security.netapp.com/advisory/ntap-20211229-0002/","https://www.mozilla.org/security/advisories/mfsa2021-51/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.starwindsoftware.com/security/sw-20220802-0001/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-43527","description":"NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \\#7, or PKCS \\#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-93.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-24329","versionConstraint":"< 0:2.7.5-93.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-24329","fix":{"state":"fixed","versions":["0:2.7.5-93.el7_9"],"available":[{"date":"2023-06-10","kind":"first-observed","version":"0:2.7.5-93.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24329","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24329","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24329","date":"2026-10-08","epss":0.20459,"percentile":0.9745}],"risk":15.344249999999999,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2023:3555","link":"https://access.redhat.com/errata/RHSA-2023:3555"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-24329","description":"A flaw was found in the Python package. An issue in the urllib.parse component could allow attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.This may lead to compromised Integrity."},"relatedVulnerabilities":[{"id":"CVE-2023-24329","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24329","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24329","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24329","date":"2026-10-08","epss":0.20459,"percentile":0.9745}],"urls":["https://github.com/python/cpython/issues/102153","https://github.com/python/cpython/pull/99421","https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/","https://pointernull.com/security/python-url-parse-problem.html","https://security.netapp.com/advisory/ntap-20230324-0004/","https://www.kb.cert.org/vuls/id/127587","https://lists.debian.org/debian-lts-announce/2024/11/msg00005.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-24329","description":"An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-93.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-24329","versionConstraint":"< 0:2.7.5-93.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-24329","fix":{"state":"fixed","versions":["0:2.7.5-93.el7_9"],"available":[{"date":"2023-06-10","kind":"first-observed","version":"0:2.7.5-93.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24329","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24329","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24329","date":"2026-10-08","epss":0.20459,"percentile":0.9745}],"risk":15.344249999999999,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2023:3555","link":"https://access.redhat.com/errata/RHSA-2023:3555"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-24329","description":"A flaw was found in the Python package. An issue in the urllib.parse component could allow attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.This may lead to compromised Integrity."},"relatedVulnerabilities":[{"id":"CVE-2023-24329","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-24329","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-24329","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-24329","date":"2026-10-08","epss":0.20459,"percentile":0.9745}],"urls":["https://github.com/python/cpython/issues/102153","https://github.com/python/cpython/pull/99421","https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PEVICI7YNGGMSL3UCMWGE66QFLATH72/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DSL6NSOAXWBJJ67XPLSSC74MNKZF3BBO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EM2XLZSTXG44TMFXF4E6VTGKR2MQCW3G/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F2NY75GFDZ5T6YPN44D3VMFT5SUVTOTG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GR5US3BYILYJ4SKBV6YBNPRUBAL5P2CN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H23OSKC6UG6IWOQAUPW74YUHWRWVXJP7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZTLGV2HYFF4AMYJL25VDIGAIHCU7UPA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWC4WGXER5P6Q75RFGL7QUTPP3N5JR7T/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZEHSXSCMA4WWQKXT6QV7AAR6SWNZ2VP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O5SP4RT3RRS434ZS2HQKQJ3VZW7YPKYR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHHJHJRLEF3TDT2K3676CAUVRDD4CCMR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEUN6T22UJFXR7J5F6UUHCXXPKJ2DVHI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PURM5CFDABEWAIWZFD2MQ7ZJGCPYSQ44/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q3J5N24ECS4B6MJDRO6UAYU6GPLYBDCL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRQHN7RWJQJHYP6E5EKESOYP5VDSHZG4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RA2MBEEES6L46OD64OBSVUUMGKNGMOWW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4IDB5OAR5Y4UK3HLMZBW4WEL2B7YFMJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZH26JGNZ5XYPZ5SAU3NKSBSPRE5OHTG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2MZOJYGFCB5PPT6AKMAU72N7QOYWLBP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UONZWLB4QVLQIY5CPDLEUEKH6WX4VQMC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTOAUJNDWZDRWVSXJ354AYZYKRMT56HU/","https://pointernull.com/security/python-url-parse-problem.html","https://security.netapp.com/advisory/ntap-20230324-0004/","https://www.kb.cert.org/vuls/id/127587","https://lists.debian.org/debian-lts-announce/2024/11/msg00005.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-24329","description":"An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-3518","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-3518","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3518","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3518","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3518","date":"2026-10-08","epss":0.21859,"percentile":0.97594}],"risk":14.86412,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3518","description":"There's a flaw in libxml2. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3518","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3518","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3518","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3518","date":"2026-10-08","epss":0.21859,"percentile":0.97594}],"urls":["http://seclists.org/fulldisclosure/2021/Jul/54","http://seclists.org/fulldisclosure/2021/Jul/55","http://seclists.org/fulldisclosure/2021/Jul/58","http://seclists.org/fulldisclosure/2021/Jul/59","https://bugzilla.redhat.com/show_bug.cgi?id=1954242","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/","https://security.gentoo.org/glsa/202107-05","https://security.netapp.com/advisory/ntap-20210625-0002/","https://support.apple.com/kb/HT212601","https://support.apple.com/kb/HT212602","https://support.apple.com/kb/HT212604","https://support.apple.com/kb/HT212605","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3518","description":"There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-3518","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-3518","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3518","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3518","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3518","date":"2026-10-08","epss":0.21859,"percentile":0.97594}],"risk":14.86412,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3518","description":"There's a flaw in libxml2. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3518","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3518","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3518","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3518","date":"2026-10-08","epss":0.21859,"percentile":0.97594}],"urls":["http://seclists.org/fulldisclosure/2021/Jul/54","http://seclists.org/fulldisclosure/2021/Jul/55","http://seclists.org/fulldisclosure/2021/Jul/58","http://seclists.org/fulldisclosure/2021/Jul/59","https://bugzilla.redhat.com/show_bug.cgi?id=1954242","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/","https://security.gentoo.org/glsa/202107-05","https://security.netapp.com/advisory/ntap-20210625-0002/","https://support.apple.com/kb/HT212601","https://support.apple.com/kb/HT212602","https://support.apple.com/kb/HT212604","https://support.apple.com/kb/HT212605","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3518","description":"There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability."}]},{"artifact":{"id":"17fba130d7153c29","cpes":["cpe:2.3:a:libtasn1:libtasn1:4.10-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libtasn1:4.10-1.el7:*:*:*:*:*:*:*"],"name":"libtasn1","purl":"pkg:rpm/centos/libtasn1@4.10-1.el7?arch=x86_64&distro=centos-7&upstream=libtasn1-4.10-1.el7.src.rpm","type":"rpm","version":"4.10-1.el7","language":"","licenses":["GPLv3+ and LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-4008","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libtasn1","version":"0:4.10-1.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-4008","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-4008","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4008","date":"2026-10-08","epss":0.29405,"percentile":0.98141}],"risk":14.702499999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-4008","description":"The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a crafted certificate."},"relatedVulnerabilities":[{"id":"CVE-2016-4008","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-4008","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4008","date":"2026-10-08","epss":0.29405,"percentile":0.98141}],"urls":["http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=a6e0a0b58f5cdaf4e9beca5bce69c09808cbb625","http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=f435825c0f527a8e52e6ffbc3ad0bc60531d537e","http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182299.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182907.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183221.html","http://lists.opensuse.org/opensuse-updates/2016-06/msg00047.html","http://lists.opensuse.org/opensuse-updates/2016-06/msg00097.html","http://www.debian.org/security/2016/dsa-3568","http://www.openwall.com/lists/oss-security/2016/04/11/3","http://www.ubuntu.com/usn/USN-2957-1","http://www.ubuntu.com/usn/USN-2957-2","https://lists.gnu.org/archive/html/help-libtasn1/2016-04/msg00009.html","https://security.gentoo.org/glsa/201703-05"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-4008","description":"The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a crafted certificate."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2007-4559","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2007-4559","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-4559","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2007-4559","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2007-4559","date":"2026-10-08","epss":0.27095,"percentile":0.98006}],"risk":14.224875,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2007-4559","description":"A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files."},"relatedVulnerabilities":[{"id":"CVE-2007-4559","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-4559","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2007-4559","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2007-4559","date":"2026-10-08","epss":0.27095,"percentile":0.98006}],"urls":["http://mail.python.org/pipermail/python-dev/2007-August/074290.html","http://mail.python.org/pipermail/python-dev/2007-August/074292.html","http://secunia.com/advisories/26623","http://www.vupen.com/english/advisories/2007/3022","https://bugzilla.redhat.com/show_bug.cgi?id=263261","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/","https://security.gentoo.org/glsa/202309-06","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-4559","description":"Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2007-4559","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2007-4559","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-4559","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2007-4559","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2007-4559","date":"2026-10-08","epss":0.27095,"percentile":0.98006}],"risk":14.224875,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2007-4559","description":"A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files."},"relatedVulnerabilities":[{"id":"CVE-2007-4559","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-4559","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2007-4559","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2007-4559","date":"2026-10-08","epss":0.27095,"percentile":0.98006}],"urls":["http://mail.python.org/pipermail/python-dev/2007-August/074290.html","http://mail.python.org/pipermail/python-dev/2007-August/074292.html","http://secunia.com/advisories/26623","http://www.vupen.com/english/advisories/2007/3022","https://bugzilla.redhat.com/show_bug.cgi?id=263261","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/","https://security.gentoo.org/glsa/202309-06","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CVBB7NU3YIRRDOKLYVN647WPRR3IAKR6/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FI55PGL47ES3OU2FQPGEHOI2EK3S2OBH/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KA4Z44ZAI4SY7THCFBUDNT5EEFO4XQ3A/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-4559","description":"Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-86.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-5010","versionConstraint":"< 0:2.7.5-86.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-5010","fix":{"state":"fixed","versions":["0:2.7.5-86.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-86.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-5010","cwe":"CWE-476","type":"Secondary","source":"talos-cna@cisco.com"},{"cve":"CVE-2019-5010","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-5010","date":"2026-10-08","epss":0.20743,"percentile":0.97484}],"risk":12.964375,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2030","link":"https://access.redhat.com/errata/RHSA-2019:2030"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-5010","description":"A null pointer dereference vulnerability was found in the certificate parsing code in Python. This causes a denial of service to applications when parsing specially crafted certificates. This vulnerability is unlikely to be triggered if application enables SSL/TLS certificate validation and accepts certificates only from trusted root certificate authorities."},"relatedVulnerabilities":[{"id":"CVE-2019-5010","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"talos-cna@cisco.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-5010","cwe":"CWE-476","type":"Secondary","source":"talos-cna@cisco.com"},{"cve":"CVE-2019-5010","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-5010","date":"2026-10-08","epss":0.20743,"percentile":0.97484}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","https://access.redhat.com/errata/RHSA-2019:3520","https://access.redhat.com/errata/RHSA-2019:3725","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://security.gentoo.org/glsa/202003-26","https://talosintelligence.com/vulnerability_reports/TALOS-2019-0758"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-5010","description":"An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-86.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-5010","versionConstraint":"< 0:2.7.5-86.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-5010","fix":{"state":"fixed","versions":["0:2.7.5-86.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-86.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-5010","cwe":"CWE-476","type":"Secondary","source":"talos-cna@cisco.com"},{"cve":"CVE-2019-5010","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-5010","date":"2026-10-08","epss":0.20743,"percentile":0.97484}],"risk":12.964375,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2030","link":"https://access.redhat.com/errata/RHSA-2019:2030"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-5010","description":"A null pointer dereference vulnerability was found in the certificate parsing code in Python. This causes a denial of service to applications when parsing specially crafted certificates. This vulnerability is unlikely to be triggered if application enables SSL/TLS certificate validation and accepts certificates only from trusted root certificate authorities."},"relatedVulnerabilities":[{"id":"CVE-2019-5010","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"talos-cna@cisco.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-5010","cwe":"CWE-476","type":"Secondary","source":"talos-cna@cisco.com"},{"cve":"CVE-2019-5010","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-5010","date":"2026-10-08","epss":0.20743,"percentile":0.97484}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","https://access.redhat.com/errata/RHSA-2019:3520","https://access.redhat.com/errata/RHSA-2019:3725","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://security.gentoo.org/glsa/202003-26","https://talosintelligence.com/vulnerability_reports/TALOS-2019-0758"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-5010","description":"An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-92.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-3177","versionConstraint":"< 0:2.7.5-92.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-3177","fix":{"state":"fixed","versions":["0:2.7.5-92.el7_9"],"available":[{"date":"2022-06-29","kind":"first-observed","version":"0:2.7.5-92.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3177","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-3177","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-3177","date":"2026-10-08","epss":0.23293,"percentile":0.97729}],"risk":12.694685,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:5235","link":"https://access.redhat.com/errata/RHSA-2022:5235"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3177","description":"A flaw was found in python. A stack-based buffer overflow was discovered in the ctypes module provided within Python. Applications that use ctypes without carefully validating the input passed to it may be vulnerable to this flaw, which would allow an attacker to overflow a buffer on the stack and crash the application. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3177","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3177","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-3177","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-3177","date":"2026-10-08","epss":0.23293,"percentile":0.97729}],"urls":["https://bugs.python.org/issue42938","https://github.com/python/cpython/pull/24239","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/04/msg00005.html","https://lists.debian.org/debian-lts-announce/2022/02/msg00013.html","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRHOCQYX3QLDGDQGTWQAUUT2GGIZCZUO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCFZMVRQUKCBQIG5F2CBVADK63NFSE4A/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FONHJIOZOFD7CD35KZL6SVBUTMBPGZGA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPE7SMXYUIWPOIZV4DQYXODRXMFX3C5E/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCQTCSP6SCVIYNIRUJC5X7YBVUHPLSC4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MGSV6BJQLRQ6RKVUXK7JGU7TP4QFGQXC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MP572OLHMS7MZO4KUPSCIMSZIA5IZZ62/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NODWHDIFBQE5RU5PUWUVE47JOT5VCMJ2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NQPARTLNSFQVMMQHPNBFOCOZOO3TMQNA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NXSMBHES3ANXXS2RSO5G6Q24BR4B2PWK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6XJAULOS5JVB2L67NCKKMJ5NTKZJBSD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4KSYYWMGAKOA2JVCQA422OINT6CKQ7O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YDTZVGSXQ7HR7OCGSUHTRNTMBG43OMKU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7GZV74KM72O2PEJN2C4XP3V5Q5MZUOO/","https://news.ycombinator.com/item?id=26185005","https://python-security.readthedocs.io/vuln/ctypes-buffer-overflow-pycarg_repr.html","https://security.gentoo.org/glsa/202101-18","https://security.netapp.com/advisory/ntap-20210226-0003/","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3177","description":"Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-92.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-3177","versionConstraint":"< 0:2.7.5-92.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-3177","fix":{"state":"fixed","versions":["0:2.7.5-92.el7_9"],"available":[{"date":"2022-06-29","kind":"first-observed","version":"0:2.7.5-92.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3177","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-3177","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-3177","date":"2026-10-08","epss":0.23293,"percentile":0.97729}],"risk":12.694685,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:5235","link":"https://access.redhat.com/errata/RHSA-2022:5235"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3177","description":"A flaw was found in python. A stack-based buffer overflow was discovered in the ctypes module provided within Python. Applications that use ctypes without carefully validating the input passed to it may be vulnerable to this flaw, which would allow an attacker to overflow a buffer on the stack and crash the application. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3177","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3177","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-3177","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-3177","date":"2026-10-08","epss":0.23293,"percentile":0.97729}],"urls":["https://bugs.python.org/issue42938","https://github.com/python/cpython/pull/24239","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/04/msg00005.html","https://lists.debian.org/debian-lts-announce/2022/02/msg00013.html","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRHOCQYX3QLDGDQGTWQAUUT2GGIZCZUO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCFZMVRQUKCBQIG5F2CBVADK63NFSE4A/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FONHJIOZOFD7CD35KZL6SVBUTMBPGZGA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPE7SMXYUIWPOIZV4DQYXODRXMFX3C5E/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCQTCSP6SCVIYNIRUJC5X7YBVUHPLSC4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MGSV6BJQLRQ6RKVUXK7JGU7TP4QFGQXC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MP572OLHMS7MZO4KUPSCIMSZIA5IZZ62/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NODWHDIFBQE5RU5PUWUVE47JOT5VCMJ2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NQPARTLNSFQVMMQHPNBFOCOZOO3TMQNA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NXSMBHES3ANXXS2RSO5G6Q24BR4B2PWK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6XJAULOS5JVB2L67NCKKMJ5NTKZJBSD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4KSYYWMGAKOA2JVCQA422OINT6CKQ7O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YDTZVGSXQ7HR7OCGSUHTRNTMBG43OMKU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7GZV74KM72O2PEJN2C4XP3V5Q5MZUOO/","https://news.ycombinator.com/item?id=26185005","https://python-security.readthedocs.io/vuln/ctypes-buffer-overflow-pycarg_repr.html","https://security.gentoo.org/glsa/202101-18","https://security.netapp.com/advisory/ntap-20210226-0003/","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3177","description":"Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-11187","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2024-11187","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-11187","cwe":"CWE-405","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2024-11187","date":"2026-10-08","epss":0.16734,"percentile":0.96965}],"risk":12.550499999999998,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-11187","description":"A flaw was found in the bind package where a crafted DNS zone may generate numerous records in the 'Additional' section of the response. This flaw allows an attacker to send a large amount of such queries, which may lead either the authoritative server or an independent resolver to run into an uncontrolled CPU resource scenario, ultimately resulting in the server not being able to attend new requests and causing a denial of service as a consequence."},"relatedVulnerabilities":[{"id":"CVE-2024-11187","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-11187","cwe":"CWE-405","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2024-11187","date":"2026-10-08","epss":0.16734,"percentile":0.96965}],"urls":["https://kb.isc.org/docs/cve-2024-11187","https://lists.debian.org/debian-lts-announce/2025/02/msg00011.html","https://security.netapp.com/advisory/ntap-20250207-0002/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-11187","description":"It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure.\nThis issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1."}]},{"artifact":{"id":"2439f8bce118b50f","cpes":["cpe:2.3:a:centos:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*"],"name":"sqlite","purl":"pkg:rpm/centos/sqlite@3.7.17-8.el7?arch=x86_64&distro=centos-7&upstream=sqlite-3.7.17-8.el7.src.rpm","type":"rpm","version":"3.7.17-8.el7","language":"","licenses":["Public Domain"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-35737","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"sqlite","version":"0:3.7.17-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-35737","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-35737","cwe":"CWE-129","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-35737","date":"2026-10-08","epss":0.22774,"percentile":0.97683}],"risk":12.411830000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-35737","description":"An array-bounds overflow vulnerability was discovered in SQLite. The vulnerability occurs when handling an overly large input passed as a string argument to some of the C-language APIs provided by SQLite. This flaw allows a remote attacker to pass specially crafted large input to the application and perform a denial of service (DoS) attack."},"relatedVulnerabilities":[{"id":"CVE-2022-35737","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-35737","cwe":"CWE-129","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-35737","date":"2026-10-08","epss":0.22774,"percentile":0.97683}],"urls":["https://blog.trailofbits.com/2022/10/25/sqlite-vulnerability-july-2022-library-api/","https://kb.cert.org/vuls/id/720344","https://security.gentoo.org/glsa/202210-40","https://security.netapp.com/advisory/ntap-20220915-0009/","https://sqlite.org/releaselog/3_39_2.html","https://www.sqlite.org/cves.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-35737","description":"SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API."}]},{"artifact":{"id":"105c3f3269638a7a","cpes":["cpe:2.3:a:krb5-libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5-libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*"],"name":"krb5-libs","purl":"pkg:rpm/centos/krb5-libs@1.15.1-8.el7?arch=x86_64&distro=centos-7&upstream=krb5-1.15.1-8.el7.src.rpm","type":"rpm","version":"1.15.1-8.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"krb5","version":"1.15.1-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-3596","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"krb5","version":"1.15.1-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2024-3596","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-08","epss":0.14859,"percentile":0.9662}],"risk":12.258675,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-3596","description":"A vulnerability in the RADIUS (Remote Authentication Dial-In User Service) protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof UDP-based RADIUS response packets. This can result in unauthorized access by modifying an Access-Reject response to an Access-Accept response, thereby compromising the authentication process."},"relatedVulnerabilities":[{"id":"CVE-2024-3596","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":9,"impactScore":6.1,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-3596","cwe":"CWE-354","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2024-3596","cwe":"CWE-924","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-3596","date":"2026-10-08","epss":0.14859,"percentile":0.9662}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/09/4","https://cert-portal.siemens.com/productcert/html/ssa-723487.html","https://cert-portal.siemens.com/productcert/html/ssa-794185.html","https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/","https://datatracker.ietf.org/doc/html/rfc2865","https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014","https://www.blastradius.fail/","https://security.netapp.com/advisory/ntap-20240822-0001/","https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocol","https://www.kb.cert.org/vuls/id/456537","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-770770.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-3596","description":"RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature."}]},{"artifact":{"id":"45da77584dff6a4b","cpes":["cpe:2.3:a:vim-minimal:vim-minimal:2\\:7.4.160-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:vim-minimal:vim_minimal:2\\:7.4.160-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim-minimal:2\\:7.4.160-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:vim_minimal:vim_minimal:2\\:7.4.160-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:vim-minimal:2\\:7.4.160-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:vim_minimal:2\\:7.4.160-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim-minimal:2\\:7.4.160-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:vim:vim_minimal:2\\:7.4.160-2.el7:*:*:*:*:*:*:*"],"name":"vim-minimal","purl":"pkg:rpm/centos/vim-minimal@7.4.160-2.el7?arch=x86_64&distro=centos-7&epoch=2&upstream=vim-7.4.160-2.el7.src.rpm","type":"rpm","version":"2:7.4.160-2.el7","language":"","licenses":["Vim"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"vim","version":"7.4.160-2.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2:7.4.160-6.el7_6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-12735","versionConstraint":"< 2:7.4.160-6.el7_6 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"vim","version":"7.4.160-2.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-12735","fix":{"state":"fixed","versions":["2:7.4.160-6.el7_6"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"2:7.4.160-6.el7_6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-12735","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-12735","date":"2026-10-08","epss":0.18964,"percentile":0.97236}],"risk":12.13696,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:1619","link":"https://access.redhat.com/errata/RHSA-2019:1619"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-12735","description":"It was found that the `:source!` command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text file in vim could result in arbitrary command execution."},"relatedVulnerabilities":[{"id":"CVE-2019-12735","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.6,"impactScore":6.1,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","metrics":{"baseScore":9.3,"impactScore":10.1,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-12735","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-12735","date":"2026-10-08","epss":0.18964,"percentile":0.97236}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00031.html","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00036.html","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00037.html","http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00034.html","http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00050.html","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00075.html","http://www.securityfocus.com/bid/108724","https://access.redhat.com/errata/RHSA-2019:1619","https://access.redhat.com/errata/RHSA-2019:1774","https://access.redhat.com/errata/RHSA-2019:1793","https://access.redhat.com/errata/RHSA-2019:1947","https://bugs.debian.org/930020","https://bugs.debian.org/930024","https://github.com/neovim/neovim/pull/10082","https://github.com/numirias/security/blob/master/doc/2019-06-04_ace-vim-neovim.md","https://github.com/vim/vim/commit/53575521406739cf20bbe4e384d88e7dca11f040","https://lists.debian.org/debian-lts-announce/2019/08/msg00003.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2BMDSHTF754TITC6AQJPCS5IRIDMMIM7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TRIRBC2YRGKPAWVRMZS4SZTGGCVRVZPR/","https://seclists.org/bugtraq/2019/Jul/39","https://seclists.org/bugtraq/2019/Jun/33","https://security.gentoo.org/glsa/202003-04","https://support.f5.com/csp/article/K93144355","https://support.f5.com/csp/article/K93144355?utm_source=f5support&amp;utm_medium=RSS","https://usn.ubuntu.com/4016-1/","https://usn.ubuntu.com/4016-2/","https://www.debian.org/security/2019/dsa-4467","https://www.debian.org/security/2019/dsa-4487","https://www.exploit-db.com/exploits/46973","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2BMDSHTF754TITC6AQJPCS5IRIDMMIM7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TRIRBC2YRGKPAWVRMZS4SZTGGCVRVZPR/","https://support.f5.com/csp/article/K93144355?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-12735","description":"getchar.c in Vim before 8.1.1365 and Neovim before 0.3.6 allows remote attackers to execute arbitrary OS commands via the :source! command in a modeline, as demonstrated by execute in Vim, and assert_fails or nvim_input in Neovim."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-3517","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-3517","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3517","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3517","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2021-3517","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-3517","date":"2026-10-08","epss":0.16986,"percentile":0.96999}],"risk":11.550479999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3517","description":"There is a flaw in the xml entity encoding functionality of libxml2. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application."},"relatedVulnerabilities":[{"id":"CVE-2021-3517","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3517","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3517","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2021-3517","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-3517","date":"2026-10-08","epss":0.16986,"percentile":0.96999}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1954232","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/","https://security.gentoo.org/glsa/202107-05","https://security.netapp.com/advisory/ntap-20210625-0002/","https://security.netapp.com/advisory/ntap-20211022-0004/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3517","description":"There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-3517","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-3517","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3517","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3517","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2021-3517","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-3517","date":"2026-10-08","epss":0.16986,"percentile":0.96999}],"risk":11.550479999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3517","description":"There is a flaw in the xml entity encoding functionality of libxml2. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application."},"relatedVulnerabilities":[{"id":"CVE-2021-3517","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":8.6,"impactScore":4.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3517","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3517","cwe":"CWE-787","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2021-3517","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-3517","date":"2026-10-08","epss":0.16986,"percentile":0.96999}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1954232","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/","https://security.gentoo.org/glsa/202107-05","https://security.netapp.com/advisory/ntap-20210625-0002/","https://security.netapp.com/advisory/ntap-20211022-0004/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3517","description":"There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application."}]},{"artifact":{"id":"8a1e48233a68a928","cpes":["cpe:2.3:a:centos:zlib:1.2.7-17.el7:*:*:*:*:*:*:*","cpe:2.3:a:zlib:zlib:1.2.7-17.el7:*:*:*:*:*:*:*"],"name":"zlib","purl":"pkg:rpm/centos/zlib@1.2.7-17.el7?arch=x86_64&distro=centos-7&upstream=zlib-1.2.7-17.el7.src.rpm","type":"rpm","version":"1.2.7-17.el7","language":"","licenses":["zlib and Boost"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.2.7-21.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-37434","versionConstraint":"< 0:1.2.7-21.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"zlib","version":"0:1.2.7-17.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-37434","fix":{"state":"fixed","versions":["0:1.2.7-21.el7_9"],"available":[{"date":"2023-03-08","kind":"first-observed","version":"0:1.2.7-21.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-37434","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-37434","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-37434","date":"2026-10-08","epss":0.18972,"percentile":0.97237}],"risk":11.383199999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2023:1095","link":"https://access.redhat.com/errata/RHSA-2023:1095"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-37434","description":"A security vulnerability was found in zlib. The flaw triggered a heap-based buffer in inflate in the inflate.c function via a large gzip header extra field. This flaw is only applicable in the call inflateGetHeader."},"relatedVulnerabilities":[{"id":"CVE-2022-37434","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-37434","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-37434","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-37434","date":"2026-10-08","epss":0.18972,"percentile":0.97237}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/37","http://seclists.org/fulldisclosure/2022/Oct/38","http://seclists.org/fulldisclosure/2022/Oct/41","http://seclists.org/fulldisclosure/2022/Oct/42","http://www.openwall.com/lists/oss-security/2022/08/05/2","http://www.openwall.com/lists/oss-security/2022/08/09/1","https://github.com/curl/curl/issues/9271","https://github.com/ivd38/zlib_overflow","https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063","https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d","https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1","https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764","https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/","https://security.netapp.com/advisory/ntap-20220901-0005/","https://security.netapp.com/advisory/ntap-20230427-0007/","https://support.apple.com/kb/HT213488","https://support.apple.com/kb/HT213489","https://support.apple.com/kb/HT213490","https://support.apple.com/kb/HT213491","https://support.apple.com/kb/HT213493","https://support.apple.com/kb/HT213494","https://www.debian.org/security/2022/dsa-5218","https://cert-portal.siemens.com/productcert/html/ssa-150063.html","https://cert-portal.siemens.com/productcert/html/ssa-202008.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-470355.html","https://cert-portal.siemens.com/productcert/html/ssa-561322.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-37434","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference)."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-16.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-0739","versionConstraint":"< 1:1.0.2k-16.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-0739","fix":{"state":"fixed","versions":["1:1.0.2k-16.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"1:1.0.2k-16.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-0739","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-0739","date":"2026-10-08","epss":0.18596,"percentile":0.97193}],"risk":10.692699999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3221","link":"https://access.redhat.com/errata/RHSA-2018:3221"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-0739","description":"Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n)."},"relatedVulnerabilities":[{"id":"CVE-2018-0739","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-0739","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-0739","date":"2026-10-08","epss":0.18596,"percentile":0.97193}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/103518","http://www.securityfocus.com/bid/105609","http://www.securitytracker.com/id/1040576","https://access.redhat.com/errata/RHSA-2018:3090","https://access.redhat.com/errata/RHSA-2018:3221","https://access.redhat.com/errata/RHSA-2018:3505","https://access.redhat.com/errata/RHSA-2019:0366","https://access.redhat.com/errata/RHSA-2019:0367","https://access.redhat.com/errata/RHSA-2019:1711","https://access.redhat.com/errata/RHSA-2019:1712","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2ac4c6f7b2b2af20c0e2b0ba05367e454cd11b33","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9310d45087ae546e27e61ddf8f6367f29848220d","https://lists.debian.org/debian-lts-announce/2018/03/msg00033.html","https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/","https://security.gentoo.org/glsa/201811-21","https://security.gentoo.org/glsa/202007-53","https://security.netapp.com/advisory/ntap-20180330-0002/","https://security.netapp.com/advisory/ntap-20180726-0002/","https://securityadvisories.paloaltonetworks.com/Home/Detail/133","https://usn.ubuntu.com/3611-1/","https://usn.ubuntu.com/3611-2/","https://www.debian.org/security/2018/dsa-4157","https://www.debian.org/security/2018/dsa-4158","https://www.openssl.org/news/secadv/20180327.txt","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.tenable.com/security/tns-2018-04","https://www.tenable.com/security/tns-2018-06","https://www.tenable.com/security/tns-2018-07"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-0739","description":"Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n)."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-43551","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-43551","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-43551","date":"2026-10-08","epss":0.1654,"percentile":0.96934}],"risk":10.337499999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-43551","description":"A vulnerability was found in curl. The issue can occur when curl's HSTS check is bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of an insecure clear-text HTTP step even when providing HTTP in the URL. Suppose the hostname in the given URL first uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion. In that case, it can bypass the HSTS mechanism using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E). Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the information, IDN encoded but looked for it as IDN decoded."},"relatedVulnerabilities":[{"id":"CVE-2022-43551","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-43551","date":"2026-10-08","epss":0.1654,"percentile":0.96934}],"urls":["https://hackerone.com/reports/1755083","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVWZW5CNSJ7UYAF2BGSYAWAEXDJYUBHA/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230427-0007/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-43551","description":"A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-43551","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-43551","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-43551","date":"2026-10-08","epss":0.1654,"percentile":0.96934}],"risk":10.337499999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-43551","description":"A vulnerability was found in curl. The issue can occur when curl's HSTS check is bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of an insecure clear-text HTTP step even when providing HTTP in the URL. Suppose the hostname in the given URL first uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion. In that case, it can bypass the HSTS mechanism using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E). Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the information, IDN encoded but looked for it as IDN decoded."},"relatedVulnerabilities":[{"id":"CVE-2022-43551","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-43551","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-43551","date":"2026-10-08","epss":0.1654,"percentile":0.96934}],"urls":["https://hackerone.com/reports/1755083","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVWZW5CNSJ7UYAF2BGSYAWAEXDJYUBHA/","https://security.gentoo.org/glsa/202310-12","https://security.netapp.com/advisory/ntap-20230427-0007/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-43551","description":"A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-59.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-5482","versionConstraint":"< 0:7.29.0-59.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-5482","fix":{"state":"fixed","versions":["0:7.29.0-59.el7"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:7.29.0-59.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-5482","cwe":"CWE-122","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2019-5482","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-5482","date":"2026-10-08","epss":0.17939,"percentile":0.97115}],"risk":10.135534999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:3916","link":"https://access.redhat.com/errata/RHSA-2020:3916"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-5482","description":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3."},"relatedVulnerabilities":[{"id":"CVE-2019-5482","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-5482","cwe":"CWE-122","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2019-5482","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-5482","date":"2026-10-08","epss":0.17939,"percentile":0.97115}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html","https://curl.haxx.se/docs/CVE-2019-5482.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/","https://seclists.org/bugtraq/2020/Feb/36","https://security.gentoo.org/glsa/202003-29","https://security.netapp.com/advisory/ntap-20191004-0003/","https://security.netapp.com/advisory/ntap-20200416-0003/","https://www.debian.org/security/2020/dsa-4633","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-5482","description":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-59.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-5482","versionConstraint":"< 0:7.29.0-59.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-5482","fix":{"state":"fixed","versions":["0:7.29.0-59.el7"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:7.29.0-59.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-5482","cwe":"CWE-122","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2019-5482","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-5482","date":"2026-10-08","epss":0.17939,"percentile":0.97115}],"risk":10.135534999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:3916","link":"https://access.redhat.com/errata/RHSA-2020:3916"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-5482","description":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3."},"relatedVulnerabilities":[{"id":"CVE-2019-5482","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-5482","cwe":"CWE-122","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2019-5482","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-5482","date":"2026-10-08","epss":0.17939,"percentile":0.97115}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00048.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00055.html","https://curl.haxx.se/docs/CVE-2019-5482.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CI4QQ2RSZX4VCFM76SIWGKY6BY7UWIC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGDVKSLY5JUNJRLYRUA6CXGQ2LM63XC3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UA7KDM2WPM5CJDDGOEGFV6SSGD2J7RNT/","https://seclists.org/bugtraq/2020/Feb/36","https://security.gentoo.org/glsa/202003-29","https://security.netapp.com/advisory/ntap-20191004-0003/","https://security.netapp.com/advisory/ntap-20200416-0003/","https://www.debian.org/security/2020/dsa-4633","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-5482","description":"Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2013-0340","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2013-0340","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2013-0340","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2013-0340","date":"2026-10-08","epss":0.19433,"percentile":0.97303}],"risk":9.7165,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2013-0340","description":"expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue.  NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE."},"relatedVulnerabilities":[{"id":"CVE-2013-0340","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2013-0340","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2013-0340","date":"2026-10-08","epss":0.19433,"percentile":0.97303}],"urls":["http://openwall.com/lists/oss-security/2013/02/22/3","http://seclists.org/fulldisclosure/2021/Oct/61","http://seclists.org/fulldisclosure/2021/Oct/62","http://seclists.org/fulldisclosure/2021/Oct/63","http://seclists.org/fulldisclosure/2021/Sep/33","http://seclists.org/fulldisclosure/2021/Sep/34","http://seclists.org/fulldisclosure/2021/Sep/35","http://seclists.org/fulldisclosure/2021/Sep/38","http://seclists.org/fulldisclosure/2021/Sep/39","http://seclists.org/fulldisclosure/2021/Sep/40","http://securitytracker.com/id?1028213","http://www.openwall.com/lists/oss-security/2013/04/12/6","http://www.openwall.com/lists/oss-security/2021/10/07/4","http://www.osvdb.org/90634","http://www.securityfocus.com/bid/58233","https://github.com/libexpat/libexpat/blob/R_2_4_1/expat/Changes","https://lists.apache.org/thread.html/r41eca5f4f09e74436cbb05dec450fc2bef37b5d3e966aa7cc5fada6d%40%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/rfb2c193360436e230b85547e85a41bea0916916f96c501f5b6fc4702%40%3Cusers.openoffice.apache.org%3E","https://security.gentoo.org/glsa/201701-21","https://support.apple.com/kb/HT212804","https://support.apple.com/kb/HT212805","https://support.apple.com/kb/HT212807","https://support.apple.com/kb/HT212814","https://support.apple.com/kb/HT212815","https://support.apple.com/kb/HT212819"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2013-0340","description":"expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue.  NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-222.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1000001","versionConstraint":"< 0:2.17-222.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000001","fix":{"state":"fixed","versions":["0:2.17-222.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.17-222.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000001","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000001","date":"2026-10-08","epss":0.13368,"percentile":0.96327}],"risk":9.691799999999999,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0805","link":"https://access.redhat.com/errata/RHSA-2018:0805"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000001","description":"In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution."},"relatedVulnerabilities":[{"id":"CVE-2018-1000001","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":7.2,"impactScore":10.1,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000001","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000001","date":"2026-10-08","epss":0.13368,"percentile":0.96327}],"urls":["http://seclists.org/oss-sec/2018/q1/38","http://www.securityfocus.com/bid/102525","http://www.securitytracker.com/id/1040162","https://access.redhat.com/errata/RHSA-2018:0805","https://security.netapp.com/advisory/ntap-20190404-0003/","https://usn.ubuntu.com/3534-1/","https://usn.ubuntu.com/3536-1/","https://www.exploit-db.com/exploits/43775/","https://www.exploit-db.com/exploits/44889/","https://www.halfdog.net/Security/2017/LibcRealpathBufferUnderflow/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000001","description":"In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-222.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-1000001","versionConstraint":"< 0:2.17-222.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000001","fix":{"state":"fixed","versions":["0:2.17-222.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.17-222.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000001","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000001","date":"2026-10-08","epss":0.13368,"percentile":0.96327}],"risk":9.691799999999999,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0805","link":"https://access.redhat.com/errata/RHSA-2018:0805"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000001","description":"In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution."},"relatedVulnerabilities":[{"id":"CVE-2018-1000001","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":7.2,"impactScore":10.1,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000001","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000001","date":"2026-10-08","epss":0.13368,"percentile":0.96327}],"urls":["http://seclists.org/oss-sec/2018/q1/38","http://www.securityfocus.com/bid/102525","http://www.securitytracker.com/id/1040162","https://access.redhat.com/errata/RHSA-2018:0805","https://security.netapp.com/advisory/ntap-20190404-0003/","https://usn.ubuntu.com/3534-1/","https://usn.ubuntu.com/3536-1/","https://www.exploit-db.com/exploits/43775/","https://www.exploit-db.com/exploits/44889/","https://www.halfdog.net/Security/2017/LibcRealpathBufferUnderflow/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000001","description":"In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer leading to a buffer underflow and potential code execution."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-19.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1559","versionConstraint":"< 1:1.0.2k-19.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-1559","fix":{"state":"fixed","versions":["1:1.0.2k-19.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"1:1.0.2k-19.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1559","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1559","date":"2026-10-08","epss":0.17139,"percentile":0.9702}],"risk":9.340755000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2304","link":"https://access.redhat.com/errata/RHSA-2019:2304"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-1559","description":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q)."},"relatedVulnerabilities":[{"id":"CVE-2019-1559","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1559","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1559","date":"2026-10-08","epss":0.17139,"percentile":0.9702}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00019.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00047.html","http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00049.html","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html","http://www.securityfocus.com/bid/107174","https://access.redhat.com/errata/RHSA-2019:2304","https://access.redhat.com/errata/RHSA-2019:2437","https://access.redhat.com/errata/RHSA-2019:2439","https://access.redhat.com/errata/RHSA-2019:2471","https://access.redhat.com/errata/RHSA-2019:3929","https://access.redhat.com/errata/RHSA-2019:3931","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9bbefbf0f24c57645e7ad6a5a71ae649d18ac8e","https://kc.mcafee.com/corporate/index?page=content&id=SB10282","https://lists.debian.org/debian-lts-announce/2019/03/msg00003.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","https://security.gentoo.org/glsa/201903-10","https://security.netapp.com/advisory/ntap-20190301-0001/","https://security.netapp.com/advisory/ntap-20190301-0002/","https://security.netapp.com/advisory/ntap-20190423-0002/","https://support.f5.com/csp/article/K18549143","https://support.f5.com/csp/article/K18549143?utm_source=f5support&amp%3Butm_medium=RSS","https://usn.ubuntu.com/3899-1/","https://usn.ubuntu.com/4376-2/","https://www.debian.org/security/2019/dsa-4400","https://www.openssl.org/news/secadv/20190226.txt","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","https://www.tenable.com/security/tns-2019-02","https://www.tenable.com/security/tns-2019-03"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1559","description":"If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q)."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-4304","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-4304","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-4304","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-4304","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-4304","date":"2026-10-08","epss":0.16195,"percentile":0.96865}],"risk":8.826275,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-4304","description":"A timing-based side channel exists in the OpenSSL RSA Decryption implementation, which could be sufficient to recover a ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption, an attacker would have to be able to send a very large number of trial messages for decryption. This issue affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP, and RSASVE."},"relatedVulnerabilities":[{"id":"CVE-2022-4304","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-4304","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-4304","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-4304","date":"2026-10-08","epss":0.16195,"percentile":0.96865}],"urls":["https://security.gentoo.org/glsa/202402-08","https://www.openssl.org/news/secadv/20230207.txt","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-4304","description":"A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-16.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-3735","versionConstraint":"< 1:1.0.2k-16.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-3735","fix":{"state":"fixed","versions":["1:1.0.2k-16.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"1:1.0.2k-16.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-3735","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-3735","date":"2026-10-08","epss":0.20968,"percentile":0.97512}],"risk":8.70172,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3221","link":"https://access.redhat.com/errata/RHSA-2018:3221"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-3735","description":"While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g."},"relatedVulnerabilities":[{"id":"CVE-2017-3735","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-3735","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-3735","date":"2026-10-08","epss":0.20968,"percentile":0.97512}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/100515","http://www.securitytracker.com/id/1039726","https://access.redhat.com/errata/RHSA-2018:3221","https://access.redhat.com/errata/RHSA-2018:3505","https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822","https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html","https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc","https://security.gentoo.org/glsa/201712-03","https://security.netapp.com/advisory/ntap-20170927-0001/","https://security.netapp.com/advisory/ntap-20171107-0002/","https://support.apple.com/HT208331","https://usn.ubuntu.com/3611-2/","https://www.debian.org/security/2017/dsa-4017","https://www.debian.org/security/2017/dsa-4018","https://www.openssl.org/news/secadv/20170828.txt","https://www.openssl.org/news/secadv/20171102.txt","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.tenable.com/security/tns-2017-14","https://www.tenable.com/security/tns-2017-15"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-3735","description":"While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g."}]},{"artifact":{"id":"8a7d97338866cd1c","cpes":["cpe:2.3:a:binutils:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:rpm/centos/binutils@2.25.1-32.base.el7_4.1?arch=x86_64&distro=centos-7&upstream=binutils-2.25.1-32.base.el7_4.1.src.rpm","type":"rpm","version":"2.25.1-32.base.el7_4.1","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.27-44.base.el7_9.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-42574","versionConstraint":"< 0:2.27-44.base.el7_9.1 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"binutils","version":"0:2.25.1-32.base.el7_4.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-42574","fix":{"state":"fixed","versions":["0:2.27-44.base.el7_9.1"],"available":[{"date":"2021-11-02","kind":"first-observed","version":"0:2.27-44.base.el7_9.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.5,"impactScore":6.1,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-42574","cwe":"CWE-94","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-42574","date":"2026-10-08","epss":0.12881,"percentile":0.96215}],"risk":8.694675000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:4033","link":"https://access.redhat.com/errata/RHSA-2021:4033"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-42574","description":"A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The special handling and rendering of those characters can be then used in an attempt to hide unexpected and potentially dangerous behaviour from the reviewer."},"relatedVulnerabilities":[{"id":"CVE-2021-42574","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-42574","cwe":"CWE-94","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-42574","date":"2026-10-08","epss":0.12881,"percentile":0.96215}],"urls":["http://www.openwall.com/lists/oss-security/2021/11/01/1","http://www.openwall.com/lists/oss-security/2021/11/01/4","http://www.openwall.com/lists/oss-security/2021/11/01/5","http://www.openwall.com/lists/oss-security/2021/11/01/6","http://www.openwall.com/lists/oss-security/2021/11/02/10","http://www.unicode.org/versions/Unicode14.0.0/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IH2RG5YTR6ZZOLUV3EUPZEIJR7XHJLVD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LQNTFF24ROHLVPLUOEISBN3F7QM27L4U/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUPA37D57VPTDLSXOOGF4UXUEADOC4PQ/","https://security.gentoo.org/glsa/202210-09","https://trojansource.codes","https://www.kb.cert.org/vuls/id/999008","https://www.scyon.nl/post/trojans-in-your-source-code","https://www.starwindsoftware.com/security/sw-20220804-0002/","https://www.unicode.org/reports/tr31/","https://www.unicode.org/reports/tr36/","https://www.unicode.org/reports/tr39/","https://www.unicode.org/reports/tr9/tr9-44.html#HL4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-42574","description":"An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard and the Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to-right and right-to-left characters, the visual order of tokens may be different from their logical order. Additionally, control characters needed to fully support the requirements of bidirectional text can further obfuscate the logical order of tokens. Unless mitigated, an adversary could craft source code such that the ordering of tokens perceived by human reviewers does not match what will be processed by a compiler/interpreter/etc. The Unicode Consortium has documented this class of vulnerability in its document, Unicode Technical Report #36, Unicode Security Considerations. The Unicode Consortium also provides guidance on mitigations for this class of issues in Unicode Technical Standard #39, Unicode Security Mechanisms, and in Unicode Standard Annex #31, Unicode Identifier and Pattern Syntax. Also, the BIDI specification allows applications to tailor the implementation in ways that can mitigate misleading visual reordering in program text; see HL4 in Unicode Standard Annex #9, Unicode Bidirectional Algorithm."}]},{"artifact":{"id":"4e4067da03756568","cpes":["cpe:2.3:a:centos:libgcc:4.8.5-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc:4.8.5-16.el7:*:*:*:*:*:*:*"],"name":"libgcc","purl":"pkg:rpm/centos/libgcc@4.8.5-16.el7?arch=x86_64&distro=centos-7&upstream=gcc-4.8.5-16.el7.src.rpm","type":"rpm","version":"4.8.5-16.el7","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"4.8.5-16.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-42574","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gcc","version":"4.8.5-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-42574","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.5,"impactScore":6.1,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-42574","cwe":"CWE-94","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-42574","date":"2026-10-08","epss":0.12881,"percentile":0.96215}],"risk":8.694675000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-42574","description":"A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The special handling and rendering of those characters can be then used in an attempt to hide unexpected and potentially dangerous behaviour from the reviewer."},"relatedVulnerabilities":[{"id":"CVE-2021-42574","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-42574","cwe":"CWE-94","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-42574","date":"2026-10-08","epss":0.12881,"percentile":0.96215}],"urls":["http://www.openwall.com/lists/oss-security/2021/11/01/1","http://www.openwall.com/lists/oss-security/2021/11/01/4","http://www.openwall.com/lists/oss-security/2021/11/01/5","http://www.openwall.com/lists/oss-security/2021/11/01/6","http://www.openwall.com/lists/oss-security/2021/11/02/10","http://www.unicode.org/versions/Unicode14.0.0/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IH2RG5YTR6ZZOLUV3EUPZEIJR7XHJLVD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LQNTFF24ROHLVPLUOEISBN3F7QM27L4U/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUPA37D57VPTDLSXOOGF4UXUEADOC4PQ/","https://security.gentoo.org/glsa/202210-09","https://trojansource.codes","https://www.kb.cert.org/vuls/id/999008","https://www.scyon.nl/post/trojans-in-your-source-code","https://www.starwindsoftware.com/security/sw-20220804-0002/","https://www.unicode.org/reports/tr31/","https://www.unicode.org/reports/tr36/","https://www.unicode.org/reports/tr39/","https://www.unicode.org/reports/tr9/tr9-44.html#HL4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-42574","description":"An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard and the Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to-right and right-to-left characters, the visual order of tokens may be different from their logical order. Additionally, control characters needed to fully support the requirements of bidirectional text can further obfuscate the logical order of tokens. Unless mitigated, an adversary could craft source code such that the ordering of tokens perceived by human reviewers does not match what will be processed by a compiler/interpreter/etc. The Unicode Consortium has documented this class of vulnerability in its document, Unicode Technical Report #36, Unicode Security Considerations. The Unicode Consortium also provides guidance on mitigations for this class of issues in Unicode Technical Standard #39, Unicode Security Mechanisms, and in Unicode Standard Annex #31, Unicode Identifier and Pattern Syntax. Also, the BIDI specification allows applications to tailor the implementation in ways that can mitigate misleading visual reordering in program text; see HL4 in Unicode Standard Annex #9, Unicode Bidirectional Algorithm."}]},{"artifact":{"id":"4a236f6ff2195b8a","cpes":["cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:4.8.5-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libstdc\\+\\+:4.8.5-16.el7:*:*:*:*:*:*:*"],"name":"libstdc++","purl":"pkg:rpm/centos/libstdc%2B%2B@4.8.5-16.el7?arch=x86_64&distro=centos-7&upstream=gcc-4.8.5-16.el7.src.rpm","type":"rpm","version":"4.8.5-16.el7","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"4.8.5-16.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-42574","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gcc","version":"4.8.5-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-42574","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.5,"impactScore":6.1,"exploitabilityScore":1.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-42574","cwe":"CWE-94","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-42574","date":"2026-10-08","epss":0.12881,"percentile":0.96215}],"risk":8.694675000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-42574","description":"A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The special handling and rendering of those characters can be then used in an attempt to hide unexpected and potentially dangerous behaviour from the reviewer."},"relatedVulnerabilities":[{"id":"CVE-2021-42574","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","metrics":{"baseScore":8.3,"impactScore":6.1,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","metrics":{"baseScore":5.1,"impactScore":6.5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-42574","cwe":"CWE-94","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-42574","date":"2026-10-08","epss":0.12881,"percentile":0.96215}],"urls":["http://www.openwall.com/lists/oss-security/2021/11/01/1","http://www.openwall.com/lists/oss-security/2021/11/01/4","http://www.openwall.com/lists/oss-security/2021/11/01/5","http://www.openwall.com/lists/oss-security/2021/11/01/6","http://www.openwall.com/lists/oss-security/2021/11/02/10","http://www.unicode.org/versions/Unicode14.0.0/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IH2RG5YTR6ZZOLUV3EUPZEIJR7XHJLVD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LQNTFF24ROHLVPLUOEISBN3F7QM27L4U/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUPA37D57VPTDLSXOOGF4UXUEADOC4PQ/","https://security.gentoo.org/glsa/202210-09","https://trojansource.codes","https://www.kb.cert.org/vuls/id/999008","https://www.scyon.nl/post/trojans-in-your-source-code","https://www.starwindsoftware.com/security/sw-20220804-0002/","https://www.unicode.org/reports/tr31/","https://www.unicode.org/reports/tr36/","https://www.unicode.org/reports/tr39/","https://www.unicode.org/reports/tr9/tr9-44.html#HL4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-42574","description":"An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard and the Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to-right and right-to-left characters, the visual order of tokens may be different from their logical order. Additionally, control characters needed to fully support the requirements of bidirectional text can further obfuscate the logical order of tokens. Unless mitigated, an adversary could craft source code such that the ordering of tokens perceived by human reviewers does not match what will be processed by a compiler/interpreter/etc. The Unicode Consortium has documented this class of vulnerability in its document, Unicode Technical Report #36, Unicode Security Considerations. The Unicode Consortium also provides guidance on mitigations for this class of issues in Unicode Technical Standard #39, Unicode Security Mechanisms, and in Unicode Standard Annex #31, Unicode Identifier and Pattern Syntax. Also, the BIDI specification allows applications to tailor the implementation in ways that can mitigate misleading visual reordering in program text; see HL4 in Unicode Standard Annex #9, Unicode Bidirectional Algorithm."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-26.P2.el7_9.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-25215","versionConstraint":"< 32:9.11.4-26.P2.el7_9.5 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-25215","fix":{"state":"fixed","versions":["32:9.11.4-26.P2.el7_9.5"],"available":[{"date":"2021-04-30","kind":"first-observed","version":"32:9.11.4-26.P2.el7_9.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-25215","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-25215","date":"2026-10-08","epss":0.11387,"percentile":0.95897}],"risk":8.540249999999999,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:1469","link":"https://access.redhat.com/errata/RHSA-2021:1469"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-25215","description":"A flaw was found in bind. The way DNAME records are processed may trigger the same RRset to the ANSWER section to be added more than once which causes an assertion check to fail. The highest threat from this flaw is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-25215","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-25215","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-25215","date":"2026-10-08","epss":0.11387,"percentile":0.95897}],"urls":["http://www.openwall.com/lists/oss-security/2021/04/29/1","http://www.openwall.com/lists/oss-security/2021/04/29/2","http://www.openwall.com/lists/oss-security/2021/04/29/3","http://www.openwall.com/lists/oss-security/2021/04/29/4","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://kb.isc.org/v1/docs/cve-2021-25215","https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/","https://security.netapp.com/advisory/ntap-20210521-0006/","https://www.debian.org/security/2021/dsa-4909","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-25215","description":"In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a query for a record triggering the flaw described above, the named process will terminate due to a failed assertion check. The vulnerability affects all currently maintained BIND 9 branches (9.11, 9.11-S, 9.16, 9.16-S, 9.17) as well as all other versions of BIND 9."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-16.P2.el7_8.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-8616","versionConstraint":"< 32:9.11.4-16.P2.el7_8.6 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-8616","fix":{"state":"fixed","versions":["32:9.11.4-16.P2.el7_8.6"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"32:9.11.4-16.P2.el7_8.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","metrics":{"baseScore":8.6,"impactScore":4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8616","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8616","date":"2026-10-08","epss":0.10593,"percentile":0.9568}],"risk":8.527365,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:2344","link":"https://access.redhat.com/errata/RHSA-2020:2344"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-8616","description":"A flaw was found in BIND, where it does not sufficiently limit the number of fetches that can be performed while processing a referral response. This flaw allows an attacker to cause a denial of service attack. The attacker can also exploit this behavior to use the recursing server as a reflector in a reflection attack with a high amplification factor."},"relatedVulnerabilities":[{"id":"CVE-2020-8616","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","metrics":{"baseScore":8.6,"impactScore":4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","metrics":{"baseScore":8.6,"impactScore":4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8616","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8616","date":"2026-10-08","epss":0.10593,"percentile":0.9568}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html","http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html","http://www.nxnsattack.com","http://www.openwall.com/lists/oss-security/2020/05/19/4","https://kb.isc.org/docs/cve-2020-8616","https://lists.debian.org/debian-lts-announce/2020/05/msg00031.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JKJXVBOKZ36ER3EUCR7VRB7WGHIIMPNJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WOGCJS2XQ3SQNF4W6GLZ73LWZJ6ZZWZI/","https://security.netapp.com/advisory/ntap-20200522-0002/","https://usn.ubuntu.com/4365-1/","https://usn.ubuntu.com/4365-2/","https://www.debian.org/security/2020/dsa-4689","https://www.synology.com/security/advisory/Synology_SA_20_12"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-8616","description":"A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral. This has at least two potential effects: The performance of the recursing server can potentially be degraded by the additional work required to perform these fetches, and The attacker can exploit this behavior to use the recursing server as a reflector in a reflection attack with a high amplification factor."}]},{"artifact":{"id":"68ecc5d34a6b0de8","cpes":["cpe:2.3:a:qemu-guest-agent:qemu-guest-agent:10\\:2.8.0-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:qemu-guest-agent:qemu_guest_agent:10\\:2.8.0-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:qemu_guest_agent:qemu-guest-agent:10\\:2.8.0-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:qemu_guest_agent:qemu_guest_agent:10\\:2.8.0-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:qemu-guest:qemu-guest-agent:10\\:2.8.0-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:qemu-guest:qemu_guest_agent:10\\:2.8.0-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:qemu_guest:qemu-guest-agent:10\\:2.8.0-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:qemu_guest:qemu_guest_agent:10\\:2.8.0-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:qemu-guest-agent:10\\:2.8.0-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:qemu_guest_agent:10\\:2.8.0-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:qemu:qemu-guest-agent:10\\:2.8.0-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:qemu:qemu_guest_agent:10\\:2.8.0-2.el7:*:*:*:*:*:*:*"],"name":"qemu-guest-agent","purl":"pkg:rpm/centos/qemu-guest-agent@2.8.0-2.el7?arch=x86_64&distro=centos-7&epoch=10&upstream=qemu-guest-agent-2.8.0-2.el7.src.rpm","type":"rpm","version":"10:2.8.0-2.el7","language":"","licenses":["GPLv2+ and LGPLv2+ and BSD"],"metadata":{"epoch":10,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-12617","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"qemu-guest-agent","version":"10:2.8.0-2.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-12617","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","metrics":{"baseScore":3.8,"impactScore":1.5,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-12617","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-12617","date":"2026-10-08","epss":0.25054,"percentile":0.97876}],"risk":8.518359999999998,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-12617","description":"qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causing a g_malloc0() call to trigger a segmentation fault when trying to allocate a large memory chunk. The vulnerability can be exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket."},"relatedVulnerabilities":[{"id":"CVE-2018-12617","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-12617","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-12617","date":"2026-10-08","epss":0.25054,"percentile":0.97876}],"urls":["http://www.securityfocus.com/bid/104531","https://gist.github.com/fakhrizulkifli/c7740d28efa07dafee66d4da5d857ef6","https://lists.debian.org/debian-lts-announce/2019/02/msg00041.html","https://lists.gnu.org/archive/html/qemu-devel/2018-06/msg03385.html","https://seclists.org/bugtraq/2019/May/76","https://usn.ubuntu.com/3826-1/","https://www.debian.org/security/2019/dsa-4454","https://www.exploit-db.com/exploits/44925/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-12617","description":"qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causing a g_malloc0() call to trigger a segmentation fault when trying to allocate a large memory chunk. The vulnerability can be exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket."}]},{"artifact":{"id":"105c3f3269638a7a","cpes":["cpe:2.3:a:krb5-libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5-libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*"],"name":"krb5-libs","purl":"pkg:rpm/centos/krb5-libs@1.15.1-8.el7?arch=x86_64&distro=centos-7&upstream=krb5-1.15.1-8.el7.src.rpm","type":"rpm","version":"1.15.1-8.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"krb5","version":"1.15.1-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-17049","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"krb5","version":"1.15.1-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-17049","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-17049","cwe":"CWE-863","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-17049","date":"2026-10-08","epss":0.13794,"percentile":0.96429}],"risk":8.414340000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-17049","description":"It was found that the Kerberos Key Distribution Center (KDC) delegation feature, Service for User (S4U), did not sufficiently protect the tickets it's providing from tempering. A malicious, authenticated service principal allowed to delegate could use this flaw to impersonate a non-forwardable user."},"relatedVulnerabilities":[{"id":"CVE-2020-17049","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","metrics":{"baseScore":9,"impactScore":10.1,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.2,"impactScore":5.9,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secure@microsoft.com","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":6.6,"impactScore":5.9,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-17049","cwe":"CWE-863","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-17049","date":"2026-10-08","epss":0.13794,"percentile":0.96429}],"urls":["http://www.openwall.com/lists/oss-security/2021/11/10/3","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17049","https://security.gentoo.org/glsa/202309-06"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-17049","description":"A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).\nTo exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it.\nThe update addresses this vulnerability by changing how the KDC validates service tickets used with KCD."}]},{"artifact":{"id":"6e67bef9af8fc97e","cpes":["cpe:2.3:a:centos:tar:2\\:1.26-32.el7:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:2\\:1.26-32.el7:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:rpm/centos/tar@1.26-32.el7?arch=x86_64&distro=centos-7&epoch=2&upstream=tar-1.26-32.el7.src.rpm","type":"rpm","version":"2:1.26-32.el7","language":"","licenses":["GPLv3+"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-6321","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"tar","version":"2:1.26-32.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-6321","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-6321","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-6321","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-6321","date":"2026-10-08","epss":0.15745,"percentile":0.96785}],"risk":7.8725000000000005,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-6321","description":"Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER."},"relatedVulnerabilities":[{"id":"CVE-2016-6321","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-6321","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-6321","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-6321","date":"2026-10-08","epss":0.15745,"percentile":0.96785}],"urls":["http://git.savannah.gnu.org/cgit/tar.git/commit/?id=7340f67b9860ea0531c1450e5aa261c50f67165d","http://lists.gnu.org/archive/html/bug-tar/2016-10/msg00016.html","http://packetstormsecurity.com/files/139370/GNU-tar-1.29-Extract-Pathname-Bypass.html","http://seclists.org/fulldisclosure/2016/Oct/102","http://seclists.org/fulldisclosure/2016/Oct/96","http://www.debian.org/security/2016/dsa-3702","http://www.securityfocus.com/bid/93937","http://www.ubuntu.com/usn/USN-3132-1","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201611-19","https://sintonen.fi/advisories/tar-extract-pathname-bypass.proper.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-6321","description":"Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the file_name parameter, aka POINTYFEATHER."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3094","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-3094","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3094","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-3094","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-3094","date":"2026-10-08","epss":0.13213,"percentile":0.96286}],"risk":7.597474999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3094","description":"A flaw was found in Bind, where sending a flood of dynamic DNS updates may cause named to allocate large amounts of memory. This issue may cause named to slow down due to a lack of free memory, resulting in a denial of service (DoS)."},"relatedVulnerabilities":[{"id":"CVE-2022-3094","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3094","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-3094","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-3094","date":"2026-10-08","epss":0.13213,"percentile":0.96286}],"urls":["https://kb.isc.org/docs/cve-2022-3094"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3094","description":"Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `named` to exit due to a lack of free memory. We are not aware of any cases where this has been exploited.\n\nMemory is allocated prior to the checking of access permissions (ACLs) and is retained during the processing of a dynamic update from a client whose access credentials are accepted. Memory allocated to clients that are not permitted to send updates is released immediately upon rejection. The scope of this vulnerability is limited therefore to trusted clients who are permitted to make dynamic zone changes.\n\nIf a dynamic update is REFUSED, memory will be released again very quickly. Therefore it is only likely to be possible to degrade or stop `named` by sending a flood of unaccepted dynamic updates comparable in magnitude to a query flood intended to achieve the same detrimental outcome.\n\nBIND 9.11 and earlier branches are also affected, but through exhaustion of internal resources rather than memory constraints. This may reduce performance but should not be a significant problem for most servers. Therefore we don't intend to address this for BIND versions prior to BIND 9.16.\nThis issue affects BIND 9 versions 9.16.0 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.8-S1 through 9.16.36-S1."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-36230","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-36230","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36230","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36230","date":"2026-10-08","epss":0.11968,"percentile":0.96027}],"risk":7.4799999999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-36230","description":"A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service."},"relatedVulnerabilities":[{"id":"CVE-2020-36230","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36230","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36230","date":"2026-10-08","epss":0.11968,"percentile":0.96027}],"urls":["http://seclists.org/fulldisclosure/2021/May/64","http://seclists.org/fulldisclosure/2021/May/65","http://seclists.org/fulldisclosure/2021/May/70","https://bugs.openldap.org/show_bug.cgi?id=9423","https://git.openldap.org/openldap/openldap/-/commit/8c1d96ee36ed98b32cd0e28b7069c7b8ea09d793","https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html","https://security.netapp.com/advisory/ntap-20210226-0002/","https://support.apple.com/kb/HT212529","https://support.apple.com/kb/HT212530","https://support.apple.com/kb/HT212531","https://www.debian.org/security/2021/dsa-4845"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-36230","description":"A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-86.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-9948","versionConstraint":"< 0:2.7.5-86.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-9948","fix":{"state":"fixed","versions":["0:2.7.5-86.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-86.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9948","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-9948","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9948","date":"2026-10-08","epss":0.11844,"percentile":0.95998}],"risk":7.343280000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2030","link":"https://access.redhat.com/errata/RHSA-2019:2030"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-9948","description":"urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call."},"relatedVulnerabilities":[{"id":"CVE-2019-9948","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9948","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-9948","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9948","date":"2026-10-08","epss":0.11844,"percentile":0.95998}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html","http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html","http://www.securityfocus.com/bid/107549","https://access.redhat.com/errata/RHSA-2019:1700","https://access.redhat.com/errata/RHSA-2019:2030","https://access.redhat.com/errata/RHSA-2019:3335","https://access.redhat.com/errata/RHSA-2019:3520","https://bugs.python.org/issue35907","https://github.com/python/cpython/pull/11842","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html","https://lists.debian.org/debian-lts-announce/2019/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/","https://seclists.org/bugtraq/2019/Oct/29","https://security.gentoo.org/glsa/202003-26","https://security.netapp.com/advisory/ntap-20190404-0004/","https://usn.ubuntu.com/4127-1/","https://usn.ubuntu.com/4127-2/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-9948","description":"urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-86.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-9948","versionConstraint":"< 0:2.7.5-86.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-9948","fix":{"state":"fixed","versions":["0:2.7.5-86.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-86.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9948","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-9948","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9948","date":"2026-10-08","epss":0.11844,"percentile":0.95998}],"risk":7.343280000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2030","link":"https://access.redhat.com/errata/RHSA-2019:2030"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-9948","description":"urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call."},"relatedVulnerabilities":[{"id":"CVE-2019-9948","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9948","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-9948","cwe":"CWE-22","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9948","date":"2026-10-08","epss":0.11844,"percentile":0.95998}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html","http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html","http://www.securityfocus.com/bid/107549","https://access.redhat.com/errata/RHSA-2019:1700","https://access.redhat.com/errata/RHSA-2019:2030","https://access.redhat.com/errata/RHSA-2019:3335","https://access.redhat.com/errata/RHSA-2019:3520","https://bugs.python.org/issue35907","https://github.com/python/cpython/pull/11842","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html","https://lists.debian.org/debian-lts-announce/2019/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/","https://seclists.org/bugtraq/2019/Oct/29","https://security.gentoo.org/glsa/202003-26","https://security.netapp.com/advisory/ntap-20190404-0004/","https://usn.ubuntu.com/4127-1/","https://usn.ubuntu.com/4127-2/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-9948","description":"urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2024-7264","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2024-7264","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":4.3,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-08","epss":0.17301,"percentile":0.9704}],"risk":7.179915,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-7264","description":"A flaw was found in libcurl, where libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If a syntactically incorrect field is given, the parser can use -1 for the length of the *time fraction*, leading to a `strlen()` performed on a pointer to a heap buffer area that is not purposely NULL terminated."},"relatedVulnerabilities":[{"id":"CVE-2024-7264","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-08","epss":0.17301,"percentile":0.9704}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/31/1","https://curl.se/docs/CVE-2024-7264.html","https://curl.se/docs/CVE-2024-7264.json","https://hackerone.com/reports/2629968","https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519","https://security.netapp.com/advisory/ntap-20240828-0008/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-7264","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2024-7264","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":5.3,"impactScore":4.3,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-08","epss":0.17301,"percentile":0.9704}],"risk":7.179915,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2024-7264","description":"A flaw was found in libcurl, where libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If a syntactically incorrect field is given, the parser can use -1 for the length of the *time fraction*, leading to a `strlen()` performed on a pointer to a heap buffer area that is not purposely NULL terminated."},"relatedVulnerabilities":[{"id":"CVE-2024-7264","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":6.3,"impactScore":3.4,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-7264","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2024-7264","date":"2026-10-08","epss":0.17301,"percentile":0.9704}],"urls":["http://www.openwall.com/lists/oss-security/2024/07/31/1","https://curl.se/docs/CVE-2024-7264.html","https://curl.se/docs/CVE-2024-7264.json","https://hackerone.com/reports/2629968","https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519","https://security.netapp.com/advisory/ntap-20240828-0008/","https://security.netapp.com/advisory/ntap-20241025-0006/","https://security.netapp.com/advisory/ntap-20241025-0010/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-7264","description":"libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an\nASN.1 Generalized Time field. If given an syntactically incorrect field, the\nparser might end up using -1 for the length of the *time fraction*, leading to\na `strlen()` getting performed on a pointer to a heap buffer area that is not\n(purposely) null terminated.\n\nThis flaw most likely leads to a crash, but can also lead to heap contents\ngetting returned to the application when\n[CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used."}]},{"artifact":{"id":"a37bd45d74f5547a","cpes":["cpe:2.3:a:libssh2:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:rpm/centos/libssh2@1.4.3-10.el7_2.1?arch=x86_64&distro=centos-7&upstream=libssh2-1.4.3-10.el7_2.1.src.rpm","type":"rpm","version":"1.4.3-10.el7_2.1","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.4.3-12.el7_6.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-3855","versionConstraint":"< 0:1.4.3-12.el7_6.2 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libssh2","version":"0:1.4.3-10.el7_2.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-3855","fix":{"state":"fixed","versions":["0:1.4.3-12.el7_6.2"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:1.4.3-12.el7_6.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3855","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3855","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3855","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-3855","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3855","date":"2026-10-08","epss":0.09294,"percentile":0.95254}],"risk":6.970499999999999,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:0679","link":"https://access.redhat.com/errata/RHSA-2019:0679"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-3855","description":"An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server."},"relatedVulnerabilities":[{"id":"CVE-2019-3855","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","metrics":{"baseScore":9.3,"impactScore":10.1,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3855","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3855","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3855","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-3855","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3855","date":"2026-10-08","epss":0.09294,"percentile":0.95254}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html","http://seclists.org/fulldisclosure/2019/Sep/42","http://www.openwall.com/lists/oss-security/2019/03/18/3","http://www.securityfocus.com/bid/107485","https://access.redhat.com/errata/RHSA-2019:0679","https://access.redhat.com/errata/RHSA-2019:1175","https://access.redhat.com/errata/RHSA-2019:1652","https://access.redhat.com/errata/RHSA-2019:1791","https://access.redhat.com/errata/RHSA-2019:1943","https://access.redhat.com/errata/RHSA-2019:2399","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3855","https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LUNHPW64IGCASZ4JQ2J5KDXNZN53DWW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IF3LNHOA75O4WZWIHJLIRMA5LJUED3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/","https://seclists.org/bugtraq/2019/Apr/25","https://seclists.org/bugtraq/2019/Mar/25","https://seclists.org/bugtraq/2019/Sep/49","https://security.netapp.com/advisory/ntap-20190327-0005/","https://support.apple.com/kb/HT210609","https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767","https://www.debian.org/security/2019/dsa-4431","https://www.libssh2.org/CVE-2019-3855.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-3855","description":"An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server."}]},{"artifact":{"id":"565dc3a69b03ae92","cpes":["cpe:2.3:a:python-ipaddress:python-ipaddress:1.0.16-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-ipaddress:python_ipaddress:1.0.16-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_ipaddress:python-ipaddress:1.0.16-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_ipaddress:python_ipaddress:1.0.16-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-ipaddress:1.0.16-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_ipaddress:1.0.16-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-ipaddress:1.0.16-2.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_ipaddress:1.0.16-2.el7:*:*:*:*:*:*:*"],"name":"python-ipaddress","purl":"pkg:rpm/centos/python-ipaddress@1.0.16-2.el7?arch=noarch&distro=centos-7&upstream=python-ipaddress-1.0.16-2.el7.src.rpm","type":"rpm","version":"1.0.16-2.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-14422","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python-ipaddress","version":"0:1.0.16-2.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-14422","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-14422","cwe":"CWE-330","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-14422","cwe":"CWE-682","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-14422","date":"2026-10-08","epss":0.12706,"percentile":0.96173}],"risk":6.9247700000000005,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-14422","description":"A vulnerability was found in the way the ipaddress python module computes hash values in the IPv4Interface and IPv6Interface classes. This flaw allows an attacker to create many dictionary entries, due to the performance of a dictionary containing the IPv4Interface or IPv6Interface objects, possibly resulting in a denial of service. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-14422","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-14422","cwe":"CWE-330","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-14422","cwe":"CWE-682","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-14422","date":"2026-10-08","epss":0.12706,"percentile":0.96173}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00003.html","http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00006.html","http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00032.html","http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00041.html","https://bugs.python.org/issue41004","https://github.com/python/cpython/pull/20956","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2023/05/msg00016.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36XI3EEQNMHGOZEI63Y7UV6XZRELYEAU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CNHPQGSP2YM3JAUD2VAMPXTIUQTZ2M2U/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CTUNTBJ3POHONQOTLEZC46POCIYYTAKZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FCCZTAYZATTNSNEAXWA7U3HCO2OVQKT5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE4O3PNDNNOMSKHNUKZKD3NGHIFUFDPX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTBKKOLFFNHG6CM4ACDX4APHSD5ZX5N4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OXI72HIHMXCQFWTULUXDG7VDA2BCYL4Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3TALOUBYU2MQD4BPLRTDQUMBKGCAXUA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V53P2YOLEQH4J7S5QHXMKMZYFTVVMTMO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VT4AF72TJ2XNIKCR4WEBR7URBJJ4YZRD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X36Y523UAZY5QFXZAAORNFY63HLBWX7N/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YILCHHTNLH4GG4GSQBX2MZRKZBXOLCKE/","https://security.gentoo.org/glsa/202008-01","https://security.netapp.com/advisory/ntap-20200724-0004/","https://usn.ubuntu.com/4428-1/","https://www.oracle.com/security-alerts/cpujan2021.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-14422","description":"Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface objects, and this attacker can cause many dictionary entries to be created. This is fixed in: v3.5.10, v3.5.10rc1; v3.6.12; v3.7.9; v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1; v3.9.0, v3.9.0b4, v3.9.0b5, v3.9.0rc1, v3.9.0rc2."}]},{"artifact":{"id":"a37bd45d74f5547a","cpes":["cpe:2.3:a:libssh2:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:rpm/centos/libssh2@1.4.3-10.el7_2.1?arch=x86_64&distro=centos-7&upstream=libssh2-1.4.3-10.el7_2.1.src.rpm","type":"rpm","version":"1.4.3-10.el7_2.1","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-13115","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libssh2","version":"0:1.4.3-10.el7_2.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-13115","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-13115","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-13115","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-13115","date":"2026-10-08","epss":0.11659,"percentile":0.95959}],"risk":6.878809999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-13115","description":"In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855."},"relatedVulnerabilities":[{"id":"CVE-2019-13115","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","metrics":{"baseScore":5.8,"impactScore":5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-13115","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-13115","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-13115","date":"2026-10-08","epss":0.11659,"percentile":0.95959}],"urls":["http://packetstormsecurity.com/files/172834/libssh2-1.8.2-Out-Of-Bounds-Read.html","https://blog.semmle.com/libssh2-integer-overflow/","https://github.com/libssh2/libssh2/compare/02ecf17...42d37aa","https://github.com/libssh2/libssh2/pull/350","https://libssh2.org/changes.html","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/07/msg00024.html","https://lists.debian.org/debian-lts-announce/2021/12/msg00013.html","https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LUNHPW64IGCASZ4JQ2J5KDXNZN53DWW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7IF3LNHOA75O4WZWIHJLIRMA5LJUED3/","https://security.netapp.com/advisory/ntap-20190806-0002/","https://support.f5.com/csp/article/K13322484","https://support.f5.com/csp/article/K13322484?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-13115","description":"In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-77.el7_6"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-9636","versionConstraint":"< 0:2.7.5-77.el7_6 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-9636","fix":{"state":"fixed","versions":["0:2.7.5-77.el7_6"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-77.el7_6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9636","cwe":"CWE-173","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9636","date":"2026-10-08","epss":0.07673,"percentile":0.94445}],"risk":6.637145,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:0710","link":"https://access.redhat.com/errata/RHSA-2019:0710"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-9636","description":"It was discovered that python's functions urllib.parse.urlsplit and urllib.parse.urlparse do not properly handle URLs encoded with Punycode/Internationalizing Domain Names in Applications (IDNA), which may result in a wrong domain name (specifically the netloc component of URL - user@domain:port) being returned by those functions. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application."},"relatedVulnerabilities":[{"id":"CVE-2019-9636","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9636","cwe":"CWE-173","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9636","date":"2026-10-08","epss":0.07673,"percentile":0.94445}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00097.html","http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00024.html","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00042.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://www.securityfocus.com/bid/107400","https://access.redhat.com/errata/RHBA-2019:0763","https://access.redhat.com/errata/RHBA-2019:0764","https://access.redhat.com/errata/RHBA-2019:0959","https://access.redhat.com/errata/RHSA-2019:0710","https://access.redhat.com/errata/RHSA-2019:0765","https://access.redhat.com/errata/RHSA-2019:0806","https://access.redhat.com/errata/RHSA-2019:0902","https://access.redhat.com/errata/RHSA-2019:0981","https://access.redhat.com/errata/RHSA-2019:0997","https://access.redhat.com/errata/RHSA-2019:1467","https://access.redhat.com/errata/RHSA-2019:2980","https://access.redhat.com/errata/RHSA-2019:3170","https://bugs.python.org/issue36216","https://github.com/python/cpython/pull/12201","https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html","https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CFBAAGM27H73OLYBUA2IAZFSUN6KGLME/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D3LXPABKVLFYUHRYJPM3CSS5MS6FXKS7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ICBEGRHIPHWPG2VGYS6R4EVKVUUF4AQW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFAXBEY2TGOBDRKTR556JBXBVFSAKD6I/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L25RTMKCF62DLC2XVSNXGX7C7HXISLVM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TR6GCO3WTV4D5L23WTCBF275VE6BVNI3/","https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization.html","https://security.gentoo.org/glsa/202003-26","https://security.netapp.com/advisory/ntap-20190517-0001/","https://usn.ubuntu.com/4127-1/","https://usn.ubuntu.com/4127-2/","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-9636","description":"Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-77.el7_6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-9636","versionConstraint":"< 0:2.7.5-77.el7_6 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-9636","fix":{"state":"fixed","versions":["0:2.7.5-77.el7_6"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-77.el7_6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9636","cwe":"CWE-173","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9636","date":"2026-10-08","epss":0.07673,"percentile":0.94445}],"risk":6.637145,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:0710","link":"https://access.redhat.com/errata/RHSA-2019:0710"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-9636","description":"It was discovered that python's functions urllib.parse.urlsplit and urllib.parse.urlparse do not properly handle URLs encoded with Punycode/Internationalizing Domain Names in Applications (IDNA), which may result in a wrong domain name (specifically the netloc component of URL - user@domain:port) being returned by those functions. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application."},"relatedVulnerabilities":[{"id":"CVE-2019-9636","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9636","cwe":"CWE-173","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9636","date":"2026-10-08","epss":0.07673,"percentile":0.94445}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00097.html","http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00024.html","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00042.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://www.securityfocus.com/bid/107400","https://access.redhat.com/errata/RHBA-2019:0763","https://access.redhat.com/errata/RHBA-2019:0764","https://access.redhat.com/errata/RHBA-2019:0959","https://access.redhat.com/errata/RHSA-2019:0710","https://access.redhat.com/errata/RHSA-2019:0765","https://access.redhat.com/errata/RHSA-2019:0806","https://access.redhat.com/errata/RHSA-2019:0902","https://access.redhat.com/errata/RHSA-2019:0981","https://access.redhat.com/errata/RHSA-2019:0997","https://access.redhat.com/errata/RHSA-2019:1467","https://access.redhat.com/errata/RHSA-2019:2980","https://access.redhat.com/errata/RHSA-2019:3170","https://bugs.python.org/issue36216","https://github.com/python/cpython/pull/12201","https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html","https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CFBAAGM27H73OLYBUA2IAZFSUN6KGLME/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D3LXPABKVLFYUHRYJPM3CSS5MS6FXKS7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ICBEGRHIPHWPG2VGYS6R4EVKVUUF4AQW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFAXBEY2TGOBDRKTR556JBXBVFSAKD6I/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L25RTMKCF62DLC2XVSNXGX7C7HXISLVM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TR6GCO3WTV4D5L23WTCBF275VE6BVNI3/","https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization.html","https://security.gentoo.org/glsa/202003-26","https://security.netapp.com/advisory/ntap-20190517-0001/","https://usn.ubuntu.com/4127-1/","https://usn.ubuntu.com/4127-2/","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-9636","description":"Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.56.1-2.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-4121","versionConstraint":"< 0:2.56.1-2.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-4121","fix":{"state":"fixed","versions":["0:2.56.1-2.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:2.56.1-2.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-4121","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-4121","date":"2026-10-08","epss":0.13099,"percentile":0.96266}],"risk":6.5495,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3140","link":"https://access.redhat.com/errata/RHSA-2018:3140"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-4121","description":"An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."},"relatedVulnerabilities":[{"id":"CVE-2018-4121","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-4121","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-4121","date":"2026-10-08","epss":0.13099,"percentile":0.96266}],"urls":["http://www.securitytracker.com/id/1040604","https://github.com/mwrlabs/CVE-2018-4121","https://security.gentoo.org/glsa/201808-04","https://support.apple.com/HT208693","https://support.apple.com/HT208694","https://support.apple.com/HT208695","https://support.apple.com/HT208696","https://support.apple.com/HT208697","https://support.apple.com/HT208698","https://www.exploit-db.com/exploits/44427/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-4121","description":"An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."}]},{"artifact":{"id":"920b5d4d13067767","cpes":["cpe:2.3:a:gobject-introspection:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject-introspection:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject_introspection:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject_introspection:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*"],"name":"gobject-introspection","purl":"pkg:rpm/centos/gobject-introspection@1.50.0-1.el7?arch=x86_64&distro=centos-7&upstream=gobject-introspection-1.50.0-1.el7.src.rpm","type":"rpm","version":"1.50.0-1.el7","language":"","licenses":["GPLv2+, LGPLv2+, MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.56.1-1.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-4121","versionConstraint":"< 0:1.56.1-1.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gobject-introspection","version":"0:1.50.0-1.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-4121","fix":{"state":"fixed","versions":["0:1.56.1-1.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:1.56.1-1.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-4121","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-4121","date":"2026-10-08","epss":0.13099,"percentile":0.96266}],"risk":6.5495,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3140","link":"https://access.redhat.com/errata/RHSA-2018:3140"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-4121","description":"An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."},"relatedVulnerabilities":[{"id":"CVE-2018-4121","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-4121","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-4121","date":"2026-10-08","epss":0.13099,"percentile":0.96266}],"urls":["http://www.securitytracker.com/id/1040604","https://github.com/mwrlabs/CVE-2018-4121","https://security.gentoo.org/glsa/201808-04","https://support.apple.com/HT208693","https://support.apple.com/HT208694","https://support.apple.com/HT208695","https://support.apple.com/HT208696","https://support.apple.com/HT208697","https://support.apple.com/HT208698","https://www.exploit-db.com/exploits/44427/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-4121","description":"An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-11.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-2716","versionConstraint":"< 0:2.1.0-11.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-2716","fix":{"state":"fixed","versions":["0:2.1.0-11.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.1.0-11.el7"}]},"cvss":[],"cwes":[{"cve":"CVE-2015-2716","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-2716","date":"2026-10-08","epss":0.07227,"percentile":0.94173}],"risk":6.504300000000001,"urls":[],"severity":"Critical","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1011","link":"https://access.redhat.com/errata/RHSA-2020:1011"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-2716","description":"Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283."},"relatedVulnerabilities":[{"id":"CVE-2015-2716","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-2716","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-2716","date":"2026-10-08","epss":0.07227,"percentile":0.94173}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html","http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00054.html","http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html","http://lists.opensuse.org/opensuse-updates/2015-05/msg00036.html","http://rhn.redhat.com/errata/RHSA-2015-0988.html","http://rhn.redhat.com/errata/RHSA-2015-1012.html","http://www.debian.org/security/2015/dsa-3260","http://www.debian.org/security/2015/dsa-3264","http://www.mozilla.org/security/announce/2015/mfsa2015-54.html","http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","http://www.securityfocus.com/bid/74611","http://www.ubuntu.com/usn/USN-2602-1","http://www.ubuntu.com/usn/USN-2603-1","https://bugzilla.mozilla.org/show_bug.cgi?id=1140537","https://hg.mozilla.org/releases/mozilla-esr31/rev/2f3e78643f5c","https://kc.mcafee.com/corporate/index?page=content&id=SB10365","https://security.gentoo.org/glsa/201605-06","https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird31.7","https://www.tenable.com/security/tns-2016-20"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-2716","description":"Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2015-1283."}]},{"artifact":{"id":"105c3f3269638a7a","cpes":["cpe:2.3:a:krb5-libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5-libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*"],"name":"krb5-libs","purl":"pkg:rpm/centos/krb5-libs@1.15.1-8.el7?arch=x86_64&distro=centos-7&upstream=krb5-1.15.1-8.el7.src.rpm","type":"rpm","version":"1.15.1-8.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"krb5","version":"1.15.1-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-36222","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"krb5","version":"1.15.1-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-36222","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-36222","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-36222","date":"2026-10-08","epss":0.10276,"percentile":0.95584}],"risk":6.4225,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-36222","description":"A flaw was found in krb5. This flaw allows an unauthenticated attacker to cause a NULL dereference in the KDC by sending a request containing a PA-ENCRYPTED-CHALLENGE padata element without using FAST. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-36222","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-36222","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-36222","date":"2026-10-08","epss":0.10276,"percentile":0.95584}],"urls":["https://github.com/krb5/krb5/commit/fc98f520caefff2e5ee9a0026fdf5109944b3562","https://github.com/krb5/krb5/releases","https://security.netapp.com/advisory/ntap-20211022-0003/","https://security.netapp.com/advisory/ntap-20211104-0007/","https://web.mit.edu/kerberos/advisories/","https://www.debian.org/security/2021/dsa-4944","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-36222","description":"ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation."}]},{"artifact":{"id":"6117cfd9a8878038","cpes":["cpe:2.3:a:centos:gnupg2:2.0.22-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:gnupg2:gnupg2:2.0.22-4.el7:*:*:*:*:*:*:*"],"name":"gnupg2","purl":"pkg:rpm/centos/gnupg2@2.0.22-4.el7?arch=x86_64&distro=centos-7&upstream=gnupg2-2.0.22-4.el7.src.rpm","type":"rpm","version":"2.0.22-4.el7","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.0.22-5.el7_5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-12020","versionConstraint":"< 0:2.0.22-5.el7_5 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gnupg2","version":"0:2.0.22-4.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-12020","fix":{"state":"fixed","versions":["0:2.0.22-5.el7_5"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.0.22-5.el7_5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-12020","cwe":"CWE-706","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-12020","date":"2026-10-08","epss":0.08546,"percentile":0.94935}],"risk":6.4094999999999995,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:2181","link":"https://access.redhat.com/errata/RHSA-2018:2181"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-12020","description":"A data validation flaw was found in the way gnupg processes file names during decryption and signature validation. An attacker may be able to inject messages into gnupg verbose message logging which may have the potential to bypass the integrity of signature authentication mechanisms and could have other unintended consequences if applications take action(s) based on parsed verbose gnupg output."},"relatedVulnerabilities":[{"id":"CVE-2018-12020","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-12020","cwe":"CWE-706","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-12020","date":"2026-10-08","epss":0.08546,"percentile":0.94935}],"urls":["http://openwall.com/lists/oss-security/2018/06/08/2","http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html","http://seclists.org/fulldisclosure/2019/Apr/38","http://www.openwall.com/lists/oss-security/2019/04/30/4","http://www.securityfocus.com/bid/104450","http://www.securitytracker.com/id/1041051","https://access.redhat.com/errata/RHSA-2018:2180","https://access.redhat.com/errata/RHSA-2018:2181","https://dev.gnupg.org/T4012","https://github.com/RUB-NDS/Johnny-You-Are-Fired","https://github.com/RUB-NDS/Johnny-You-Are-Fired/blob/master/paper/johnny-fired.pdf","https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0","https://lists.debian.org/debian-lts-announce/2021/12/msg00027.html","https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000425.html","https://usn.ubuntu.com/3675-1/","https://usn.ubuntu.com/3675-2/","https://usn.ubuntu.com/3675-3/","https://usn.ubuntu.com/3964-1/","https://www.debian.org/security/2018/dsa-4222","https://www.debian.org/security/2018/dsa-4223","https://www.debian.org/security/2018/dsa-4224"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-12020","description":"mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the \"--status-fd 2\" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-51.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1000120","versionConstraint":"< 0:7.29.0-51.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000120","fix":{"state":"fixed","versions":["0:7.29.0-51.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-51.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000120","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000120","date":"2026-10-08","epss":0.11608,"percentile":0.95946}],"risk":6.03616,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000120","description":"It was found that libcurl did not safely parse FTP URLs when using the CURLOPT_FTP_FILEMETHOD method. An attacker, able to provide a specially crafted FTP URL to an application using libcurl, could write a NULL byte at an arbitrary location, resulting in a crash or an unspecified behavior."},"relatedVulnerabilities":[{"id":"CVE-2018-1000120","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000120","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000120","date":"2026-10-08","epss":0.11608,"percentile":0.95946}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/103414","http://www.securitytracker.com/id/1040531","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2019:1543","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-9cd6.html","https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html","https://usn.ubuntu.com/3598-1/","https://usn.ubuntu.com/3598-2/","https://www.debian.org/security/2018/dsa-4136","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000120","description":"A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-51.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-1000120","versionConstraint":"< 0:7.29.0-51.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000120","fix":{"state":"fixed","versions":["0:7.29.0-51.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-51.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000120","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000120","date":"2026-10-08","epss":0.11608,"percentile":0.95946}],"risk":6.03616,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000120","description":"It was found that libcurl did not safely parse FTP URLs when using the CURLOPT_FTP_FILEMETHOD method. An attacker, able to provide a specially crafted FTP URL to an application using libcurl, could write a NULL byte at an arbitrary location, resulting in a crash or an unspecified behavior."},"relatedVulnerabilities":[{"id":"CVE-2018-1000120","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000120","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000120","date":"2026-10-08","epss":0.11608,"percentile":0.95946}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/103414","http://www.securitytracker.com/id/1040531","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2019:1543","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-9cd6.html","https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html","https://usn.ubuntu.com/3598-1/","https://usn.ubuntu.com/3598-2/","https://www.debian.org/security/2018/dsa-4136","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000120","description":"A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse."}]},{"artifact":{"id":"5253e5996daa37c8","cpes":["cpe:2.3:a:nss-pem:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss-pem:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_pem:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_pem:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*"],"name":"nss-pem","purl":"pkg:rpm/centos/nss-pem@1.0.3-4.el7?arch=x86_64&distro=centos-7&upstream=nss-pem-1.0.3-4.el7.src.rpm","type":"rpm","version":"1.0.3-4.el7","language":"","licenses":["MPLv1.1"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.0.3-5.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1000120","versionConstraint":"< 0:1.0.3-5.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-pem","version":"0:1.0.3-4.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000120","fix":{"state":"fixed","versions":["0:1.0.3-5.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:1.0.3-5.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000120","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000120","date":"2026-10-08","epss":0.11608,"percentile":0.95946}],"risk":6.03616,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000120","description":"It was found that libcurl did not safely parse FTP URLs when using the CURLOPT_FTP_FILEMETHOD method. An attacker, able to provide a specially crafted FTP URL to an application using libcurl, could write a NULL byte at an arbitrary location, resulting in a crash or an unspecified behavior."},"relatedVulnerabilities":[{"id":"CVE-2018-1000120","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000120","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000120","date":"2026-10-08","epss":0.11608,"percentile":0.95946}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/103414","http://www.securitytracker.com/id/1040531","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2019:1543","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-9cd6.html","https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html","https://usn.ubuntu.com/3598-1/","https://usn.ubuntu.com/3598-2/","https://www.debian.org/security/2018/dsa-4136","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000120","description":"A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-4472","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-4472","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-4472","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4472","date":"2026-10-08","epss":0.11946,"percentile":0.96023}],"risk":5.973,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-4472","description":"The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716."},"relatedVulnerabilities":[{"id":"CVE-2016-4472","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-4472","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4472","date":"2026-10-08","epss":0.11946,"percentile":0.96023}],"urls":["http://www.securityfocus.com/bid/91528","http://www.ubuntu.com/usn/USN-3013-1","https://bugzilla.redhat.com/show_bug.cgi?id=1344251","https://kc.mcafee.com/corporate/index?page=content&id=SB10365","https://security.gentoo.org/glsa/201701-21","https://sourceforge.net/p/expat/code_git/ci/f0bec73b018caa07d3e75ec8dd967f3785d71bde","https://www.tenable.com/security/tns-2016-20"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-4472","description":"The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-12.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-3738","versionConstraint":"< 1:1.0.2k-12.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-3738","fix":{"state":"fixed","versions":["1:1.0.2k-12.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"1:1.0.2k-12.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-3738","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-3738","date":"2026-10-08","epss":0.13411,"percentile":0.96334}],"risk":5.967895,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0998","link":"https://access.redhat.com/errata/RHSA-2018:0998"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-3738","description":"There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository."},"relatedVulnerabilities":[{"id":"CVE-2017-3738","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-3738","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-3738","date":"2026-10-08","epss":0.13411,"percentile":0.96334}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/102118","http://www.securitytracker.com/id/1039978","https://access.redhat.com/errata/RHSA-2018:0998","https://access.redhat.com/errata/RHSA-2018:2185","https://access.redhat.com/errata/RHSA-2018:2186","https://access.redhat.com/errata/RHSA-2018:2187","https://github.com/openssl/openssl/commit/e502cc86df9dafded1694fceb3228ee34d11c11a","https://nodejs.org/en/blog/vulnerability/december-2017-security-releases/","https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc","https://security.gentoo.org/glsa/201712-03","https://security.netapp.com/advisory/ntap-20171208-0001/","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us","https://www.debian.org/security/2017/dsa-4065","https://www.debian.org/security/2018/dsa-4157","https://www.openssl.org/news/secadv/20171207.txt","https://www.openssl.org/news/secadv/20180327.txt","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.tenable.com/security/tns-2017-16","https://www.tenable.com/security/tns-2018-04","https://www.tenable.com/security/tns-2018-06","https://www.tenable.com/security/tns-2018-07"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-3738","description":"There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository."}]},{"artifact":{"id":"a52be44551f9d578","cpes":["cpe:2.3:a:centos:lua:5.1.4-15.el7:*:*:*:*:*:*:*","cpe:2.3:a:lua:lua:5.1.4-15.el7:*:*:*:*:*:*:*"],"name":"lua","purl":"pkg:rpm/centos/lua@5.1.4-15.el7?arch=x86_64&distro=centos-7&upstream=lua-5.1.4-15.el7.src.rpm","type":"rpm","version":"5.1.4-15.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2014-5461","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"lua","version":"0:5.1.4-15.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2014-5461","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2014-5461","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-5461","date":"2026-10-08","epss":0.11714,"percentile":0.95974}],"risk":5.856999999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2014-5461","description":"Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments."},"relatedVulnerabilities":[{"id":"CVE-2014-5461","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2014-5461","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-5461","date":"2026-10-08","epss":0.11714,"percentile":0.95974}],"urls":["http://advisories.mageia.org/MGASA-2014-0414.html","http://lists.opensuse.org/opensuse-updates/2014-09/msg00030.html","http://secunia.com/advisories/59890","http://secunia.com/advisories/60869","http://secunia.com/advisories/61411","http://www.debian.org/security/2014/dsa-3015","http://www.debian.org/security/2014/dsa-3016","http://www.lua.org/bugs.html#5.2.2-1","http://www.mandriva.com/security/advisories?name=MDVSA-2015:144","http://www.openwall.com/lists/oss-security/2014/08/21/1","http://www.openwall.com/lists/oss-security/2014/08/21/4","http://www.openwall.com/lists/oss-security/2014/08/27/2","http://www.securityfocus.com/bid/69342","http://www.ubuntu.com/usn/USN-2338-1","https://security.gentoo.org/glsa/201701-53","https://security.gentoo.org/glsa/202305-23"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2014-5461","description":"Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-51.el7_6.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-14618","versionConstraint":"< 0:7.29.0-51.el7_6.3 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-14618","fix":{"state":"fixed","versions":["0:7.29.0-51.el7_6.3"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-51.el7_6.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-14618","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14618","cwe":"CWE-131","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14618","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-14618","date":"2026-10-08","epss":0.11115,"percentile":0.95837}],"risk":5.835375,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:1880","link":"https://access.redhat.com/errata/RHSA-2019:1880"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-14618","description":"curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31 bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is almost identical to CVE-2017-8816.)"},"relatedVulnerabilities":[{"id":"CVE-2018-14618","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-14618","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14618","cwe":"CWE-131","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14618","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-14618","date":"2026-10-08","epss":0.11115,"percentile":0.95837}],"urls":["http://www.securitytracker.com/id/1041605","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2019:1880","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14618","https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf","https://curl.haxx.se/docs/CVE-2018-14618.html","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0014","https://security.gentoo.org/glsa/201903-03","https://usn.ubuntu.com/3765-1/","https://usn.ubuntu.com/3765-2/","https://www.debian.org/security/2018/dsa-4286"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-14618","description":"curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31 bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is almost identical to CVE-2017-8816.)"}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-51.el7_6.3"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-14618","versionConstraint":"< 0:7.29.0-51.el7_6.3 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-14618","fix":{"state":"fixed","versions":["0:7.29.0-51.el7_6.3"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-51.el7_6.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-14618","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14618","cwe":"CWE-131","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14618","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-14618","date":"2026-10-08","epss":0.11115,"percentile":0.95837}],"risk":5.835375,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:1880","link":"https://access.redhat.com/errata/RHSA-2019:1880"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-14618","description":"curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31 bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is almost identical to CVE-2017-8816.)"},"relatedVulnerabilities":[{"id":"CVE-2018-14618","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-14618","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14618","cwe":"CWE-131","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14618","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-14618","date":"2026-10-08","epss":0.11115,"percentile":0.95837}],"urls":["http://www.securitytracker.com/id/1041605","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2019:1880","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14618","https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf","https://curl.haxx.se/docs/CVE-2018-14618.html","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0014","https://security.gentoo.org/glsa/201903-03","https://usn.ubuntu.com/3765-1/","https://usn.ubuntu.com/3765-2/","https://www.debian.org/security/2018/dsa-4286"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-14618","description":"curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31 bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is almost identical to CVE-2017-8816.)"}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-86.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-14647","versionConstraint":"< 0:2.7.5-86.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-14647","fix":{"state":"fixed","versions":["0:2.7.5-86.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-86.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-14647","cwe":"CWE-335","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14647","cwe":"CWE-665","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14647","cwe":"CWE-909","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-14647","date":"2026-10-08","epss":0.10911,"percentile":0.95776}],"risk":5.619165000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2030","link":"https://access.redhat.com/errata/RHSA-2019:2030"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-14647","description":"Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by contructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming large amounts CPU and RAM."},"relatedVulnerabilities":[{"id":"CVE-2018-14647","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-14647","cwe":"CWE-335","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14647","cwe":"CWE-665","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14647","cwe":"CWE-909","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-14647","date":"2026-10-08","epss":0.10911,"percentile":0.95776}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://www.securityfocus.com/bid/105396","http://www.securitytracker.com/id/1041740","https://access.redhat.com/errata/RHSA-2019:1260","https://access.redhat.com/errata/RHSA-2019:2030","https://access.redhat.com/errata/RHSA-2019:3725","https://bugs.python.org/issue34623","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14647","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html","https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBJCB2HWOJLP3L7CUQHJHNBHLSVOXJE5/","https://usn.ubuntu.com/3817-1/","https://usn.ubuntu.com/3817-2/","https://www.debian.org/security/2018/dsa-4306","https://www.debian.org/security/2018/dsa-4307"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-14647","description":"Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming large amounts CPU and RAM. The vulnerability exists in Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-86.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-14647","versionConstraint":"< 0:2.7.5-86.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-14647","fix":{"state":"fixed","versions":["0:2.7.5-86.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-86.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-14647","cwe":"CWE-335","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14647","cwe":"CWE-665","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14647","cwe":"CWE-909","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-14647","date":"2026-10-08","epss":0.10911,"percentile":0.95776}],"risk":5.619165000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2030","link":"https://access.redhat.com/errata/RHSA-2019:2030"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-14647","description":"Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by contructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming large amounts CPU and RAM."},"relatedVulnerabilities":[{"id":"CVE-2018-14647","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-14647","cwe":"CWE-335","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14647","cwe":"CWE-665","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-14647","cwe":"CWE-909","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-14647","date":"2026-10-08","epss":0.10911,"percentile":0.95776}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://www.securityfocus.com/bid/105396","http://www.securitytracker.com/id/1041740","https://access.redhat.com/errata/RHSA-2019:1260","https://access.redhat.com/errata/RHSA-2019:2030","https://access.redhat.com/errata/RHSA-2019:3725","https://bugs.python.org/issue34623","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14647","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html","https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBJCB2HWOJLP3L7CUQHJHNBHLSVOXJE5/","https://usn.ubuntu.com/3817-1/","https://usn.ubuntu.com/3817-2/","https://www.debian.org/security/2018/dsa-4306","https://www.debian.org/security/2018/dsa-4307"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-14647","description":"Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming large amounts CPU and RAM. The vulnerability exists in Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-8285","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-8285","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8285","cwe":"CWE-674","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2020-8285","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-8285","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8285","date":"2026-10-08","epss":0.0977,"percentile":0.95425}],"risk":5.617749999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-8285","description":"Libcurl offers a wildcard matching functionality, which allows a callback (set with `CURLOPT_CHUNK_BGN_FUNCTION`) to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns `CURL_CHUNK_BGN_FUNC_SKIP`, to tell libcurl to not deal with that file, the internal function in libcurl then calls itself recursively to handle the next directory entry. If there's a sufficient amount of file entries and if the callback returns \"skip\" enough number of times, libcurl runs out of stack space. The exact amount will of course vary with platforms, compilers and other environmental factors."},"relatedVulnerabilities":[{"id":"CVE-2020-8285","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8285","cwe":"CWE-674","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2020-8285","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-8285","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8285","date":"2026-10-08","epss":0.0977,"percentile":0.95425}],"urls":["http://seclists.org/fulldisclosure/2021/Apr/51","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://curl.se/docs/CVE-2020-8285.html","https://github.com/curl/curl/issues/6255","https://hackerone.com/reports/1045844","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/","https://security.gentoo.org/glsa/202012-14","https://security.netapp.com/advisory/ntap-20210122-0007/","https://support.apple.com/kb/HT212325","https://support.apple.com/kb/HT212326","https://support.apple.com/kb/HT212327","https://www.debian.org/security/2021/dsa-4881","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-8285","description":"curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-8285","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-8285","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8285","cwe":"CWE-674","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2020-8285","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-8285","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8285","date":"2026-10-08","epss":0.0977,"percentile":0.95425}],"risk":5.617749999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-8285","description":"Libcurl offers a wildcard matching functionality, which allows a callback (set with `CURLOPT_CHUNK_BGN_FUNCTION`) to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns `CURL_CHUNK_BGN_FUNC_SKIP`, to tell libcurl to not deal with that file, the internal function in libcurl then calls itself recursively to handle the next directory entry. If there's a sufficient amount of file entries and if the callback returns \"skip\" enough number of times, libcurl runs out of stack space. The exact amount will of course vary with platforms, compilers and other environmental factors."},"relatedVulnerabilities":[{"id":"CVE-2020-8285","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8285","cwe":"CWE-674","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2020-8285","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-8285","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8285","date":"2026-10-08","epss":0.0977,"percentile":0.95425}],"urls":["http://seclists.org/fulldisclosure/2021/Apr/51","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://curl.se/docs/CVE-2020-8285.html","https://github.com/curl/curl/issues/6255","https://hackerone.com/reports/1045844","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/12/msg00029.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DAEHE2S2QLO4AO4MEEYL75NB7SAH5PSL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZUVSQHN2ESHMJXNQ2Z7T2EELBB5HJXG/","https://security.gentoo.org/glsa/202012-14","https://security.netapp.com/advisory/ntap-20210122-0007/","https://support.apple.com/kb/HT212325","https://support.apple.com/kb/HT212326","https://support.apple.com/kb/HT212327","https://www.debian.org/security/2021/dsa-4881","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-8285","description":"curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1551","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-1551","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1551","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1551","date":"2026-10-08","epss":0.14298,"percentile":0.96523}],"risk":5.57622,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-1551","description":"An integer overflow was found in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli.  As per upstream:\n* No EC algorithms are affected. \n* Attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. \n* Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway.\n* Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME"},"relatedVulnerabilities":[{"id":"CVE-2019-1551","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1551","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1551","date":"2026-10-08","epss":0.14298,"percentile":0.96523}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00030.html","http://packetstormsecurity.com/files/155754/Slackware-Security-Advisory-openssl-Updates.html","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=419102400a2811582a7a3d4a4e317d72e5ce0a8f","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f1c5eea8a817075d31e43f5876993c6710238c98","https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/","https://seclists.org/bugtraq/2019/Dec/39","https://seclists.org/bugtraq/2019/Dec/46","https://security.gentoo.org/glsa/202004-10","https://security.netapp.com/advisory/ntap-20191210-0001/","https://usn.ubuntu.com/4376-1/","https://usn.ubuntu.com/4504-1/","https://www.debian.org/security/2019/dsa-4594","https://www.debian.org/security/2021/dsa-4855","https://www.openssl.org/news/secadv/20191206.txt","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.tenable.com/security/tns-2019-09","https://www.tenable.com/security/tns-2020-03","https://www.tenable.com/security/tns-2020-11","https://www.tenable.com/security/tns-2021-10"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1551","description":"There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t)."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-12.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-3736","versionConstraint":"< 1:1.0.2k-12.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-3736","fix":{"state":"fixed","versions":["1:1.0.2k-12.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"1:1.0.2k-12.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-3736","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-3736","date":"2026-10-08","epss":0.10133,"percentile":0.95543}],"risk":5.5224850000000005,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0998","link":"https://access.redhat.com/errata/RHSA-2018:0998"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-3736","description":"There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen."},"relatedVulnerabilities":[{"id":"CVE-2017-3736","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-3736","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-3736","date":"2026-10-08","epss":0.10133,"percentile":0.95543}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/101666","http://www.securitytracker.com/id/1039727","https://access.redhat.com/errata/RHSA-2018:0998","https://access.redhat.com/errata/RHSA-2018:2185","https://access.redhat.com/errata/RHSA-2018:2186","https://access.redhat.com/errata/RHSA-2018:2187","https://access.redhat.com/errata/RHSA-2018:2568","https://access.redhat.com/errata/RHSA-2018:2575","https://access.redhat.com/errata/RHSA-2018:2713","https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871","https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc","https://security.gentoo.org/glsa/201712-03","https://security.netapp.com/advisory/ntap-20171107-0002/","https://security.netapp.com/advisory/ntap-20180117-0002/","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03881en_us","https://www.debian.org/security/2017/dsa-4017","https://www.debian.org/security/2017/dsa-4018","https://www.openssl.org/news/secadv/20171102.txt","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.tenable.com/security/tns-2017-14","https://www.tenable.com/security/tns-2017-15"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-3736","description":"There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-3737","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-3737","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3737","cwe":"CWE-835","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3737","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-3737","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3737","date":"2026-10-08","epss":0.11586,"percentile":0.95942}],"risk":5.50335,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3737","description":"A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3737","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3737","cwe":"CWE-835","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3737","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-3737","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3737","date":"2026-10-08","epss":0.11586,"percentile":0.95942}],"urls":["https://bugs.python.org/issue44022","https://bugzilla.redhat.com/show_bug.cgi?id=1995162","https://github.com/python/cpython/pull/25916","https://github.com/python/cpython/pull/26503","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html","https://python-security.readthedocs.io/vuln/urllib-100-continue-loop.html","https://security.netapp.com/advisory/ntap-20220407-0009/","https://ubuntu.com/security/CVE-2021-3737","https://www.oracle.com/security-alerts/cpujul2022.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3737","description":"A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-3737","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-3737","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3737","cwe":"CWE-835","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3737","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-3737","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3737","date":"2026-10-08","epss":0.11586,"percentile":0.95942}],"risk":5.50335,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3737","description":"A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3737","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3737","cwe":"CWE-835","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3737","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-3737","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3737","date":"2026-10-08","epss":0.11586,"percentile":0.95942}],"urls":["https://bugs.python.org/issue44022","https://bugzilla.redhat.com/show_bug.cgi?id=1995162","https://github.com/python/cpython/pull/25916","https://github.com/python/cpython/pull/26503","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html","https://python-security.readthedocs.io/vuln/urllib-100-continue-loop.html","https://security.netapp.com/advisory/ntap-20220407-0009/","https://ubuntu.com/security/CVE-2021-3737","https://www.oracle.com/security-alerts/cpujul2022.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3737","description":"A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-9233","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9233","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9233","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-9233","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9233","date":"2026-10-08","epss":0.08739,"percentile":0.95033}],"risk":5.461874999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9233","description":"XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD."},"relatedVulnerabilities":[{"id":"CVE-2017-9233","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9233","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-9233","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9233","date":"2026-10-08","epss":0.08739,"percentile":0.95033}],"urls":["http://www.debian.org/security/2017/dsa-3898","http://www.openwall.com/lists/oss-security/2017/06/17/7","http://www.securityfocus.com/bid/99276","http://www.securitytracker.com/id/1039427","https://github.com/libexpat/libexpat/blob/master/expat/Changes","https://libexpat.github.io/doc/cve-2017-9233/","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://support.apple.com/HT208112","https://support.apple.com/HT208113","https://support.apple.com/HT208115","https://support.apple.com/HT208144","https://support.f5.com/csp/article/K03244804"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9233","description":"XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-25219","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-25219","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2021-25219","date":"2026-10-08","epss":0.10576,"percentile":0.95678}],"risk":5.44664,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-25219","description":"A flaw was found in the way bind processes broken responses from authoritative servers. This caching mechanism could be abused by an attacker to significantly degrade resolver performance."},"relatedVulnerabilities":[{"id":"CVE-2021-25219","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2021-25219","date":"2026-10-08","epss":0.10576,"percentile":0.95678}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://kb.isc.org/v1/docs/cve-2021-25219","https://lists.debian.org/debian-lts-announce/2021/11/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EF4NAVRV4H3W4GA3LGGZYUKD3HSJBAVW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGV7SA27CTYLGFJSPUM3V36ZWK7WWDI4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTKC4E3HUOLYN5IA4EBL4VAQSWG2ZVTX/","https://security.gentoo.org/glsa/202210-25","https://security.netapp.com/advisory/ntap-20211118-0002/","https://www.debian.org/security/2021/dsa-4994","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-25219","description":"In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing."}]},{"artifact":{"id":"105c3f3269638a7a","cpes":["cpe:2.3:a:krb5-libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5-libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*"],"name":"krb5-libs","purl":"pkg:rpm/centos/krb5-libs@1.15.1-8.el7?arch=x86_64&distro=centos-7&upstream=krb5-1.15.1-8.el7.src.rpm","type":"rpm","version":"1.15.1-8.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"krb5","version":"1.15.1-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.15.1-55.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-42898","versionConstraint":"< 0:1.15.1-55.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"krb5","version":"1.15.1-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-42898","fix":{"state":"fixed","versions":["0:1.15.1-55.el7_9"],"available":[{"date":"2022-11-29","kind":"first-observed","version":"0:1.15.1-55.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-42898","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-42898","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-42898","date":"2026-10-08","epss":0.06473,"percentile":0.93575}],"risk":5.275495,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:8640","link":"https://access.redhat.com/errata/RHSA-2022:8640"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-42898","description":"A vulnerability was found in MIT krb5. This flaw allows an authenticated attacker to cause a KDC or kadmind process to crash by reading beyond the bounds of allocated memory, creating a denial of service. A privileged attacker may similarly be able to cause a Kerberos or GSS application service to crash."},"relatedVulnerabilities":[{"id":"CVE-2022-42898","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-42898","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-42898","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-42898","date":"2026-10-08","epss":0.06473,"percentile":0.93575}],"urls":["https://bugzilla.samba.org/show_bug.cgi?id=15203","https://github.com/heimdal/heimdal/security/advisories/GHSA-64mq-fvfj-5x3c","https://github.com/krb5/krb5/commit/ea92d2f0fcceb54a70910fa32e9a0d7a5afc3583","https://security.gentoo.org/glsa/202309-06","https://security.gentoo.org/glsa/202310-06","https://security.netapp.com/advisory/ntap-20230216-0008/","https://security.netapp.com/advisory/ntap-20230223-0001/","https://web.mit.edu/kerberos/advisories/","https://web.mit.edu/kerberos/krb5-1.19/","https://web.mit.edu/kerberos/krb5-1.20/README-1.20.1.txt","https://www.samba.org/samba/security/CVE-2022-42898.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-42898","description":"PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\""}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-27619","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-27619","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2020-27619","date":"2026-10-08","epss":0.08334,"percentile":0.9482}],"risk":5.208749999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-27619","description":"In Python3's Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP."},"relatedVulnerabilities":[{"id":"CVE-2020-27619","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2020-27619","date":"2026-10-08","epss":0.08334,"percentile":0.9482}],"urls":["https://bugs.python.org/issue41944","https://github.com/python/cpython/commit/2ef5caa58febc8968e670e39e3d37cf8eef3cab8","https://github.com/python/cpython/commit/43e523103886af66d6c27cd72431b5d9d14cd2a9","https://github.com/python/cpython/commit/6c6c256df3636ff6f6136820afaefa5a10a3ac33","https://github.com/python/cpython/commit/b664a1df4ee71d3760ab937653b10997081b1794","https://github.com/python/cpython/commit/e912e945f2960029d039d3390ea08835ad39374b","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RSLQD5CCM75IZGAMBDGUZEATYU5YSGJ7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGIY6I4YS3WOXAK4SXKIEOC2G4VZKIR7/","https://security.gentoo.org/glsa/202402-04","https://security.netapp.com/advisory/ntap-20201123-0004/","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-27619","description":"In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-27619","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-27619","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2020-27619","date":"2026-10-08","epss":0.08334,"percentile":0.9482}],"risk":5.208749999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-27619","description":"In Python3's Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP."},"relatedVulnerabilities":[{"id":"CVE-2020-27619","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2020-27619","date":"2026-10-08","epss":0.08334,"percentile":0.9482}],"urls":["https://bugs.python.org/issue41944","https://github.com/python/cpython/commit/2ef5caa58febc8968e670e39e3d37cf8eef3cab8","https://github.com/python/cpython/commit/43e523103886af66d6c27cd72431b5d9d14cd2a9","https://github.com/python/cpython/commit/6c6c256df3636ff6f6136820afaefa5a10a3ac33","https://github.com/python/cpython/commit/b664a1df4ee71d3760ab937653b10997081b1794","https://github.com/python/cpython/commit/e912e945f2960029d039d3390ea08835ad39374b","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RSLQD5CCM75IZGAMBDGUZEATYU5YSGJ7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGIY6I4YS3WOXAK4SXKIEOC2G4VZKIR7/","https://security.gentoo.org/glsa/202402-04","https://security.netapp.com/advisory/ntap-20201123-0004/","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-27619","description":"In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-1000158","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-1000158","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-1000158","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-1000158","date":"2026-10-08","epss":0.07944,"percentile":0.94599}],"risk":5.20332,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-1000158","description":"CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)"},"relatedVulnerabilities":[{"id":"CVE-2017-1000158","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-1000158","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-1000158","date":"2026-10-08","epss":0.07944,"percentile":0.94599}],"urls":["http://www.securitytracker.com/id/1039890","https://bugs.python.org/issue30657","https://lists.debian.org/debian-lts-announce/2017/11/msg00035.html","https://lists.debian.org/debian-lts-announce/2017/11/msg00036.html","https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html","https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html","https://security.gentoo.org/glsa/201805-02","https://security.netapp.com/advisory/ntap-20230216-0001/","https://www.debian.org/security/2018/dsa-4307"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000158","description":"CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)"}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-1000158","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-1000158","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-1000158","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-1000158","date":"2026-10-08","epss":0.07944,"percentile":0.94599}],"risk":5.20332,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-1000158","description":"CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)"},"relatedVulnerabilities":[{"id":"CVE-2017-1000158","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-1000158","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-1000158","date":"2026-10-08","epss":0.07944,"percentile":0.94599}],"urls":["http://www.securitytracker.com/id/1039890","https://bugs.python.org/issue30657","https://lists.debian.org/debian-lts-announce/2017/11/msg00035.html","https://lists.debian.org/debian-lts-announce/2017/11/msg00036.html","https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html","https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html","https://security.gentoo.org/glsa/201805-02","https://security.netapp.com/advisory/ntap-20230216-0001/","https://www.debian.org/security/2018/dsa-4307"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000158","description":"CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)"}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.9.4-74.el7_6.1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-5743","versionConstraint":"< 32:9.9.4-74.el7_6.1 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-5743","fix":{"state":"fixed","versions":["32:9.9.4-74.el7_6.1"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"32:9.9.4-74.el7_6.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","metrics":{"baseScore":8.6,"impactScore":4,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-5743","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-5743","date":"2026-10-08","epss":0.06457,"percentile":0.93559}],"risk":5.197885,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:1294","link":"https://access.redhat.com/errata/RHSA-2019:1294"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-5743","description":"A flaw was found in the way bind implemented tunable which limited simultaneous TCP client connections. A remote attacker could use this flaw to exhaust the pool of file descriptors available to named, potentially affecting network connections and the management of files such as log files or zone journal files. In cases where the named process is not limited by OS-enforced per-process limits, this could additionally potentially lead to exhaustion of all available free file descriptors on that system."},"relatedVulnerabilities":[{"id":"CVE-2018-5743","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-5743","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-5743","date":"2026-10-08","epss":0.06457,"percentile":0.93559}],"urls":["https://kb.isc.org/docs/cve-2018-5743","https://support.f5.com/csp/article/K74009656?utm_source=f5support&amp%3Butm_medium=RSS","https://www.synology.com/security/advisory/Synology_SA_19_20"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-5743","description":"By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-51.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1000122","versionConstraint":"< 0:7.29.0-51.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000122","fix":{"state":"fixed","versions":["0:7.29.0-51.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-51.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000122","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000122","date":"2026-10-08","epss":0.09039,"percentile":0.95166}],"risk":5.197424999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000122","description":"A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage"},"relatedVulnerabilities":[{"id":"CVE-2018-1000122","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000122","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000122","date":"2026-10-08","epss":0.09039,"percentile":0.95166}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/103436","http://www.securitytracker.com/id/1040530","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2019:1543","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-b047.html","https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html","https://usn.ubuntu.com/3598-1/","https://usn.ubuntu.com/3598-2/","https://www.debian.org/security/2018/dsa-4136","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000122","description":"A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage"}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-51.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-1000122","versionConstraint":"< 0:7.29.0-51.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000122","fix":{"state":"fixed","versions":["0:7.29.0-51.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-51.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000122","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000122","date":"2026-10-08","epss":0.09039,"percentile":0.95166}],"risk":5.197424999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000122","description":"A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage"},"relatedVulnerabilities":[{"id":"CVE-2018-1000122","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000122","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000122","date":"2026-10-08","epss":0.09039,"percentile":0.95166}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/103436","http://www.securitytracker.com/id/1040530","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2019:1543","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-b047.html","https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html","https://usn.ubuntu.com/3598-1/","https://usn.ubuntu.com/3598-2/","https://www.debian.org/security/2018/dsa-4136","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000122","description":"A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage"}]},{"artifact":{"id":"5253e5996daa37c8","cpes":["cpe:2.3:a:nss-pem:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss-pem:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_pem:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_pem:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*"],"name":"nss-pem","purl":"pkg:rpm/centos/nss-pem@1.0.3-4.el7?arch=x86_64&distro=centos-7&upstream=nss-pem-1.0.3-4.el7.src.rpm","type":"rpm","version":"1.0.3-4.el7","language":"","licenses":["MPLv1.1"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.0.3-5.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1000122","versionConstraint":"< 0:1.0.3-5.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-pem","version":"0:1.0.3-4.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000122","fix":{"state":"fixed","versions":["0:1.0.3-5.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:1.0.3-5.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000122","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000122","date":"2026-10-08","epss":0.09039,"percentile":0.95166}],"risk":5.197424999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000122","description":"A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage"},"relatedVulnerabilities":[{"id":"CVE-2018-1000122","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000122","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000122","date":"2026-10-08","epss":0.09039,"percentile":0.95166}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/103436","http://www.securitytracker.com/id/1040530","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2019:1543","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-b047.html","https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html","https://usn.ubuntu.com/3598-1/","https://usn.ubuntu.com/3598-2/","https://www.debian.org/security/2018/dsa-4136","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000122","description":"A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage"}]},{"artifact":{"id":"105c3f3269638a7a","cpes":["cpe:2.3:a:krb5-libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5-libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*"],"name":"krb5-libs","purl":"pkg:rpm/centos/krb5-libs@1.15.1-8.el7?arch=x86_64&distro=centos-7&upstream=krb5-1.15.1-8.el7.src.rpm","type":"rpm","version":"1.15.1-8.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"krb5","version":"1.15.1-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-15088","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"krb5","version":"1.15.1-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-15088","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.1,"impactScore":5.9,"exploitabilityScore":1.2},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-15088","cwe":"CWE-121","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2017-15088","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-15088","date":"2026-10-08","epss":0.08302,"percentile":0.94795}],"risk":5.02271,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-15088","description":"A stack based buffer overflow was found in the get_matching_data() function, when reading the principal's certificate during pkinit preauthentication. If the Certifcate Authority's subject line is sufficiently long, an attacker able to have a specially crafted certificate signed could crash the authentication process, such as kinit, or, possibly, run arbitrary code."},"relatedVulnerabilities":[{"id":"CVE-2017-15088","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-15088","cwe":"CWE-121","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2017-15088","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-15088","date":"2026-10-08","epss":0.08302,"percentile":0.94795}],"urls":["http://www.securityfocus.com/bid/101594","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871698","https://bugzilla.redhat.com/show_bug.cgi?id=1504045","https://github.com/krb5/krb5/commit/fbb687db1088ddd894d975996e5f6a4252b9a2b4","https://github.com/krb5/krb5/pull/707"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-15088","description":"plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2 mishandles Distinguished Name (DN) fields, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) in situations involving untrusted X.509 data, related to the get_matching_data and X509_NAME_oneline_ex functions. NOTE: this has security relevance only in use cases outside of the MIT Kerberos distribution, e.g., the use of get_matching_data in KDC certauth plugin code that is specific to Red Hat."}]},{"artifact":{"id":"7b77d95c84d8a04b","cpes":["cpe:2.3:a:cyrus-sasl-lib:cyrus-sasl-lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus-sasl-lib:cyrus_sasl_lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl_lib:cyrus-sasl-lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl_lib:cyrus_sasl_lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus-sasl:cyrus-sasl-lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus-sasl:cyrus_sasl_lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl:cyrus-sasl-lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl:cyrus_sasl_lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:cyrus-sasl-lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:cyrus_sasl_lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus:cyrus-sasl-lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus:cyrus_sasl_lib:2.1.26-21.el7:*:*:*:*:*:*:*"],"name":"cyrus-sasl-lib","purl":"pkg:rpm/centos/cyrus-sasl-lib@2.1.26-21.el7?arch=x86_64&distro=centos-7&upstream=cyrus-sasl-2.1.26-21.el7.src.rpm","type":"rpm","version":"2.1.26-21.el7","language":"","licenses":["BSD with advertising"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cyrus-sasl","version":"2.1.26-21.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-19906","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"cyrus-sasl","version":"2.1.26-21.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-19906","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-19906","cwe":"CWE-193","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-19906","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-19906","date":"2026-10-08","epss":0.08036,"percentile":0.94649}],"risk":5.0225,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-19906","description":"cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl."},"relatedVulnerabilities":[{"id":"CVE-2019-19906","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-19906","cwe":"CWE-193","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-19906","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-19906","date":"2026-10-08","epss":0.08036,"percentile":0.94649}],"urls":["http://seclists.org/fulldisclosure/2020/Jul/23","http://seclists.org/fulldisclosure/2020/Jul/24","http://www.openwall.com/lists/oss-security/2022/02/23/4","https://github.com/cyrusimap/cyrus-sasl/issues/587","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/12/msg00027.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MW6GZCLECGL2PBNHVNPJIX4RPVRVFR7R/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OB4GSVOJ6ESHQNT5GSV63OX5D4KPSTGT/","https://seclists.org/bugtraq/2019/Dec/42","https://support.apple.com/kb/HT211288","https://support.apple.com/kb/HT211289","https://usn.ubuntu.com/4256-1/","https://www.debian.org/security/2019/dsa-4591","https://www.openldap.org/its/index.cgi/Incoming?id=9123"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-19906","description":"cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl."}]},{"artifact":{"id":"2439f8bce118b50f","cpes":["cpe:2.3:a:centos:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*"],"name":"sqlite","purl":"pkg:rpm/centos/sqlite@3.7.17-8.el7?arch=x86_64&distro=centos-7&upstream=sqlite-3.7.17-8.el7.src.rpm","type":"rpm","version":"3.7.17-8.el7","language":"","licenses":["Public Domain"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-19603","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"sqlite","version":"0:3.7.17-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-19603","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-19603","date":"2026-10-08","epss":0.0803,"percentile":0.94645}],"risk":5.01875,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-19603","description":"SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash."},"relatedVulnerabilities":[{"id":"CVE-2019-19603","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-19603","date":"2026-10-08","epss":0.0803,"percentile":0.94645}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13","https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E","https://security.netapp.com/advisory/ntap-20191223-0001/","https://usn.ubuntu.com/4394-1/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.sqlite.org/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-19603","description":"SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-19.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-0734","versionConstraint":"< 1:1.0.2k-19.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-0734","fix":{"state":"fixed","versions":["1:1.0.2k-19.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"1:1.0.2k-19.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.1,"impactScore":3.6,"exploitabilityScore":1.5},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-0734","cwe":"CWE-327","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-0734","date":"2026-10-08","epss":0.12154,"percentile":0.96062}],"risk":4.92237,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2304","link":"https://access.redhat.com/errata/RHSA-2019:2304"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-0734","description":"The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p)."},"relatedVulnerabilities":[{"id":"CVE-2018-0734","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-0734","cwe":"CWE-327","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-0734","date":"2026-10-08","epss":0.12154,"percentile":0.96062}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html","http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html","http://www.securityfocus.com/bid/105758","https://access.redhat.com/errata/RHSA-2019:2304","https://access.redhat.com/errata/RHSA-2019:3700","https://access.redhat.com/errata/RHSA-2019:3932","https://access.redhat.com/errata/RHSA-2019:3933","https://access.redhat.com/errata/RHSA-2019:3935","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=43e6a58d4991a451daf4891ff05a48735df871ac","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8abfe72e8c1de1b95f50aa0d9134803b4d00070f","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ef11e19d1365eea2b1851e6f540a0bf365d303e7","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","https://security.netapp.com/advisory/ntap-20181105-0002/","https://security.netapp.com/advisory/ntap-20190118-0002/","https://security.netapp.com/advisory/ntap-20190423-0002/","https://usn.ubuntu.com/3840-1/","https://www.debian.org/security/2018/dsa-4348","https://www.debian.org/security/2018/dsa-4355","https://www.openssl.org/news/secadv/20181030.txt","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.tenable.com/security/tns-2018-16","https://www.tenable.com/security/tns-2018-17"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-0734","description":"The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p)."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-7595","versionConstraint":"< 0:2.9.1-6.el7.5 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-7595","fix":{"state":"fixed","versions":["0:2.9.1-6.el7.5"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:2.9.1-6.el7.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7595","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-7595","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-7595","date":"2026-10-08","epss":0.07836,"percentile":0.94538}],"risk":4.8975,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:3996","link":"https://access.redhat.com/errata/RHSA-2020:3996"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-7595","description":"xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation."},"relatedVulnerabilities":[{"id":"CVE-2020-7595","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7595","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-7595","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-7595","date":"2026-10-08","epss":0.07836,"percentile":0.94538}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html","https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf","https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076","https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/","https://security.gentoo.org/glsa/202010-04","https://security.netapp.com/advisory/ntap-20200702-0005/","https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08","https://usn.ubuntu.com/4274-1/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7595","description":"xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-7595","versionConstraint":"< 0:2.9.1-6.el7.5 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-7595","fix":{"state":"fixed","versions":["0:2.9.1-6.el7.5"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:2.9.1-6.el7.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7595","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-7595","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-7595","date":"2026-10-08","epss":0.07836,"percentile":0.94538}],"risk":4.8975,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:3996","link":"https://access.redhat.com/errata/RHSA-2020:3996"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-7595","description":"xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation."},"relatedVulnerabilities":[{"id":"CVE-2020-7595","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-7595","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-7595","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-7595","date":"2026-10-08","epss":0.07836,"percentile":0.94538}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html","https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf","https://gitlab.gnome.org/GNOME/libxml2/commit/0e1a49c89076","https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/","https://security.gentoo.org/glsa/202010-04","https://security.netapp.com/advisory/ntap-20200702-0005/","https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08","https://usn.ubuntu.com/4274-1/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-7595","description":"xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation."}]},{"artifact":{"id":"0d30817732b6409e","cpes":["cpe:2.3:a:PyYAML:PyYAML:3.10-11.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:PyYAML:3.10-11.el7:*:*:*:*:*:*:*"],"name":"PyYAML","purl":"pkg:rpm/centos/PyYAML@3.10-11.el7?arch=x86_64&distro=centos-7&upstream=PyYAML-3.10-11.el7.src.rpm","type":"rpm","version":"3.10-11.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-18342","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"PyYAML","version":"0:3.10-11.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-18342","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-18342","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-18342","date":"2026-10-08","epss":0.05656,"percentile":0.92774}],"risk":4.89244,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-18342","description":"In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function."},"relatedVulnerabilities":[{"id":"CVE-2017-18342","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-18342","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-18342","date":"2026-10-08","epss":0.05656,"percentile":0.92774}],"urls":["https://github.com/marshmallow-code/apispec/issues/278","https://github.com/yaml/pyyaml/blob/master/CHANGES","https://github.com/yaml/pyyaml/issues/193","https://github.com/yaml/pyyaml/pull/74","https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load%28input%29-Deprecation","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JEX7IPV5P2QJITAMA5Z63GQCZA5I6NVZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSQQMRUQSXBSUXLCRD3TSZYQ7SEZRKCE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6JCFGEIEOFMWWIXGHSELMKQDD4CV2BA/","https://security.gentoo.org/glsa/202003-45"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-18342","description":"In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function."}]},{"artifact":{"id":"a37bd45d74f5547a","cpes":["cpe:2.3:a:libssh2:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:rpm/centos/libssh2@1.4.3-10.el7_2.1?arch=x86_64&distro=centos-7&upstream=libssh2-1.4.3-10.el7_2.1.src.rpm","type":"rpm","version":"1.4.3-10.el7_2.1","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.4.3-12.el7_6.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-3862","versionConstraint":"< 0:1.4.3-12.el7_6.3 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libssh2","version":"0:1.4.3-10.el7_2.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-3862","fix":{"state":"fixed","versions":["0:1.4.3-12.el7_6.3"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:1.4.3-12.el7_6.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3862","cwe":"CWE-130","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3862","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3862","date":"2026-10-08","epss":0.07898,"percentile":0.94578}],"risk":4.85727,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:1884","link":"https://access.redhat.com/errata/RHSA-2019:1884"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-3862","description":"An out of bounds read flaw was discovered in libssh2 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a denial of service or read data in the client memory."},"relatedVulnerabilities":[{"id":"CVE-2019-3862","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3862","cwe":"CWE-130","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3862","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3862","date":"2026-10-08","epss":0.07898,"percentile":0.94578}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html","http://www.openwall.com/lists/oss-security/2019/03/18/3","http://www.securityfocus.com/bid/107485","https://access.redhat.com/errata/RHSA-2019:1884","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3862","https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/","https://seclists.org/bugtraq/2019/Apr/25","https://seclists.org/bugtraq/2019/Mar/25","https://security.netapp.com/advisory/ntap-20190327-0005/","https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767","https://www.debian.org/security/2019/dsa-4431","https://www.libssh2.org/CVE-2019-3862.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-3862","description":"An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-8804","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-8804","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-8804","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-8804","date":"2026-10-08","epss":0.0767,"percentile":0.94444}],"risk":4.79375,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-8804","description":"The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references"},"relatedVulnerabilities":[{"id":"CVE-2017-8804","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.8,"impactScore":6.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-8804","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-8804","date":"2026-10-08","epss":0.0767,"percentile":0.94444}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00026.html","http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00039.html","http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00049.html","http://www.openwall.com/lists/oss-security/2017/05/05/2","http://www.securityfocus.com/bid/98339","https://bugzilla.suse.com/show_bug.cgi?id=1037559#c7","https://seclists.org/oss-sec/2017/q2/228","https://sourceware.org/bugzilla/show_bug.cgi?id=21461","https://sourceware.org/legacy-ml/libc-alpha/2017-05/msg00128.html","https://sourceware.org/legacy-ml/libc-alpha/2017-05/msg00129.html","https://sourceware.org/ml/libc-alpha/2017-05/msg00105.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-8804","description":"The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references"}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-8804","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-8804","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-8804","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-8804","date":"2026-10-08","epss":0.0767,"percentile":0.94444}],"risk":4.79375,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-8804","description":"The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references"},"relatedVulnerabilities":[{"id":"CVE-2017-8804","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.8,"impactScore":6.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-8804","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-8804","date":"2026-10-08","epss":0.0767,"percentile":0.94444}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00026.html","http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00039.html","http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00049.html","http://www.openwall.com/lists/oss-security/2017/05/05/2","http://www.securityfocus.com/bid/98339","https://bugzilla.suse.com/show_bug.cgi?id=1037559#c7","https://seclists.org/oss-sec/2017/q2/228","https://sourceware.org/bugzilla/show_bug.cgi?id=21461","https://sourceware.org/legacy-ml/libc-alpha/2017-05/msg00128.html","https://sourceware.org/legacy-ml/libc-alpha/2017-05/msg00129.html","https://sourceware.org/ml/libc-alpha/2017-05/msg00105.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-8804","description":"The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2.25 mishandle failures of buffer deserialization, which allows remote attackers to cause a denial of service (virtual memory allocation, or memory consumption if an overcommit setting is not used) via a crafted UDP packet to port 111, a related issue to CVE-2017-8779. NOTE: [Information provided from upstream and references"}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-21.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-1971","versionConstraint":"< 1:1.0.2k-21.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-1971","fix":{"state":"fixed","versions":["1:1.0.2k-21.el7_9"],"available":[{"date":"2020-12-19","kind":"first-observed","version":"1:1.0.2k-21.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-1971","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-1971","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-1971","date":"2026-10-08","epss":0.07051,"percentile":0.94041}],"risk":4.724170000000001,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:5566","link":"https://access.redhat.com/errata/RHSA-2020:5566"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-1971","description":"A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-1971","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-1971","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-1971","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-1971","date":"2026-10-08","epss":0.07051,"percentile":0.94041}],"urls":["http://www.openwall.com/lists/oss-security/2021/09/14/2","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920","https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676","https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E","https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html","https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/","https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc","https://security.gentoo.org/glsa/202012-13","https://security.netapp.com/advisory/ntap-20201218-0005/","https://security.netapp.com/advisory/ntap-20210513-0002/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://www.debian.org/security/2020/dsa-4807","https://www.openssl.org/news/secadv/20201208.txt","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.tenable.com/security/tns-2020-11","https://www.tenable.com/security/tns-2021-09","https://www.tenable.com/security/tns-2021-10"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-1971","description":"The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w)."}]},{"artifact":{"id":"a97aad0351fb3a68","cpes":["cpe:2.3:a:bzip2-libs:bzip2-libs:1.0.6-13.el7:*:*:*:*:*:*:*","cpe:2.3:a:bzip2-libs:bzip2_libs:1.0.6-13.el7:*:*:*:*:*:*:*","cpe:2.3:a:bzip2_libs:bzip2-libs:1.0.6-13.el7:*:*:*:*:*:*:*","cpe:2.3:a:bzip2_libs:bzip2_libs:1.0.6-13.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bzip2-libs:1.0.6-13.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bzip2_libs:1.0.6-13.el7:*:*:*:*:*:*:*","cpe:2.3:a:bzip2:bzip2-libs:1.0.6-13.el7:*:*:*:*:*:*:*","cpe:2.3:a:bzip2:bzip2_libs:1.0.6-13.el7:*:*:*:*:*:*:*"],"name":"bzip2-libs","purl":"pkg:rpm/centos/bzip2-libs@1.0.6-13.el7?arch=x86_64&distro=centos-7&upstream=bzip2-1.0.6-13.el7.src.rpm","type":"rpm","version":"1.0.6-13.el7","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bzip2","version":"1.0.6-13.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-3189","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bzip2","version":"1.0.6-13.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-3189","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-3189","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-3189","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-3189","date":"2026-10-08","epss":0.15562,"percentile":0.96753}],"risk":4.6686,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-3189","description":"A use-after-free flaw was found in bzip2recover, leading to a null pointer dereference, or a write to a closed file descriptor. An attacker could use this flaw by sending a specially crafted bzip2 file to recover and force the program to crash."},"relatedVulnerabilities":[{"id":"CVE-2016-3189","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-3189","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-3189","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-3189","date":"2026-10-08","epss":0.15562,"percentile":0.96753}],"urls":["http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html","http://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html","http://www.openwall.com/lists/oss-security/2016/06/20/1","http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","http://www.securityfocus.com/bid/91297","http://www.securitytracker.com/id/1036132","https://bugzilla.redhat.com/show_bug.cgi?id=1319648","https://lists.apache.org/thread.html/r19b4a70ac52093115fd71d773a7a4f579599e6275a13cfcf6252c3e3%40%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r1dc4c9b3bd559301bdb1557245f78b8910146efb1ee534b774c5f6af%40%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/r481cda41fefb03e04c51484ed14421d812e5ce9e0972edff10f37260%40%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r4ad2ea01354e394b7fa8c78a184b7e1634d51be9bc0e9e4d7e6c9305%40%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r5f7ac2bd631ccb12ced65b71ff11f94e76d05b22000795e4a7b61203%40%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r5f80cf3ade5bb73410643e885fe6b7bf9f0222daf3533e42c7ae240c%40%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r6e3962fc9f6a79851f70cffdec5759065969cec9c6708b964464b301%40%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E","https://lists.apache.org/thread.html/redf17d8ad16140733b25ca402ae825d6dfa9b85f73d9fb3fd0c75d73%40%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/rffebcbeaace56ff1fed7916700d2f414ca1366386fb1293e99b3e31e%40%3Cjira.kafka.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/06/msg00021.html","https://seclists.org/bugtraq/2019/Aug/4","https://seclists.org/bugtraq/2019/Jul/22","https://security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc","https://security.gentoo.org/glsa/201708-08","https://usn.ubuntu.com/4038-1/","https://usn.ubuntu.com/4038-2/","https://www.oracle.com/security-alerts/cpuoct2020.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-3189","description":"Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block."}]},{"artifact":{"id":"a37bd45d74f5547a","cpes":["cpe:2.3:a:libssh2:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:rpm/centos/libssh2@1.4.3-10.el7_2.1?arch=x86_64&distro=centos-7&upstream=libssh2-1.4.3-10.el7_2.1.src.rpm","type":"rpm","version":"1.4.3-10.el7_2.1","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.4.3-12.el7_6.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-3856","versionConstraint":"< 0:1.4.3-12.el7_6.2 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libssh2","version":"0:1.4.3-10.el7_2.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-3856","fix":{"state":"fixed","versions":["0:1.4.3-12.el7_6.2"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:1.4.3-12.el7_6.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3856","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3856","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3856","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-3856","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3856","date":"2026-10-08","epss":0.06131,"percentile":0.93268}],"risk":4.59825,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:0679","link":"https://access.redhat.com/errata/RHSA-2019:0679"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-3856","description":"An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server."},"relatedVulnerabilities":[{"id":"CVE-2019-3856","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3856","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3856","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3856","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-3856","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3856","date":"2026-10-08","epss":0.06131,"percentile":0.93268}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","https://access.redhat.com/errata/RHSA-2019:0679","https://access.redhat.com/errata/RHSA-2019:1175","https://access.redhat.com/errata/RHSA-2019:1652","https://access.redhat.com/errata/RHSA-2019:1791","https://access.redhat.com/errata/RHSA-2019:1943","https://access.redhat.com/errata/RHSA-2019:2399","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3856","https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","https://seclists.org/bugtraq/2019/Apr/25","https://security.netapp.com/advisory/ntap-20190327-0005/","https://www.debian.org/security/2019/dsa-4431","https://www.libssh2.org/CVE-2019-3856.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-3856","description":"An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server."}]},{"artifact":{"id":"a37bd45d74f5547a","cpes":["cpe:2.3:a:libssh2:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:rpm/centos/libssh2@1.4.3-10.el7_2.1?arch=x86_64&distro=centos-7&upstream=libssh2-1.4.3-10.el7_2.1.src.rpm","type":"rpm","version":"1.4.3-10.el7_2.1","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.4.3-12.el7_6.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-3857","versionConstraint":"< 0:1.4.3-12.el7_6.2 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libssh2","version":"0:1.4.3-10.el7_2.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-3857","fix":{"state":"fixed","versions":["0:1.4.3-12.el7_6.2"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:1.4.3-12.el7_6.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3857","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3857","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3857","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-3857","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3857","date":"2026-10-08","epss":0.06131,"percentile":0.93267}],"risk":4.59825,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:0679","link":"https://access.redhat.com/errata/RHSA-2019:0679"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-3857","description":"An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server."},"relatedVulnerabilities":[{"id":"CVE-2019-3857","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3857","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3857","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3857","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-3857","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3857","date":"2026-10-08","epss":0.06131,"percentile":0.93267}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","https://access.redhat.com/errata/RHSA-2019:0679","https://access.redhat.com/errata/RHSA-2019:1175","https://access.redhat.com/errata/RHSA-2019:1652","https://access.redhat.com/errata/RHSA-2019:1791","https://access.redhat.com/errata/RHSA-2019:1943","https://access.redhat.com/errata/RHSA-2019:2399","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3857","https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","https://seclists.org/bugtraq/2019/Apr/25","https://security.netapp.com/advisory/ntap-20190327-0005/","https://www.debian.org/security/2019/dsa-4431","https://www.libssh2.org/CVE-2019-3857.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-3857","description":"An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server."}]},{"artifact":{"id":"4fe62a05ef590267","cpes":["cpe:2.3:a:yum-plugin-fastestmirror:yum-plugin-fastestmirror:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum-plugin-fastestmirror:yum_plugin_fastestmirror:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum_plugin_fastestmirror:yum-plugin-fastestmirror:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum_plugin_fastestmirror:yum_plugin_fastestmirror:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum-plugin:yum-plugin-fastestmirror:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum-plugin:yum_plugin_fastestmirror:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum_plugin:yum-plugin-fastestmirror:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum_plugin:yum_plugin_fastestmirror:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:yum-plugin-fastestmirror:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:yum_plugin_fastestmirror:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum:yum-plugin-fastestmirror:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum:yum_plugin_fastestmirror:1.1.31-42.el7:*:*:*:*:*:*:*"],"name":"yum-plugin-fastestmirror","purl":"pkg:rpm/centos/yum-plugin-fastestmirror@1.1.31-42.el7?arch=noarch&distro=centos-7&upstream=yum-utils-1.1.31-42.el7.src.rpm","type":"rpm","version":"1.1.31-42.el7","language":"","licenses":["GPLv2+"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"yum-utils","version":"1.1.31-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.1.31-46.el7_5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-10897","versionConstraint":"< 0:1.1.31-46.el7_5 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"yum-utils","version":"1.1.31-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-10897","fix":{"state":"fixed","versions":["0:1.1.31-46.el7_5"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:1.1.31-46.el7_5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-10897","cwe":"CWE-59","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-10897","cwe":"CWE-22","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-10897","date":"2026-10-08","epss":0.05638,"percentile":0.92757}],"risk":4.59497,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:2285","link":"https://access.redhat.com/errata/RHSA-2018:2285"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-10897","description":"A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files."},"relatedVulnerabilities":[{"id":"CVE-2018-10897","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","metrics":{"baseScore":9.3,"impactScore":10.1,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-10897","cwe":"CWE-59","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-10897","cwe":"CWE-22","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-10897","date":"2026-10-08","epss":0.05638,"percentile":0.92757}],"urls":["http://www.securitytracker.com/id/1041594","https://access.redhat.com/errata/RHSA-2018:2284","https://access.redhat.com/errata/RHSA-2018:2285","https://access.redhat.com/errata/RHSA-2018:2626","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10897","https://github.com/rpm-software-management/yum-utils/commit/6a8de061f8fdc885e74ebe8c94625bf53643b71c","https://github.com/rpm-software-management/yum-utils/commit/7554c0133eb830a71dc01846037cc047d0acbc2c","https://github.com/rpm-software-management/yum-utils/pull/43","https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-10897","description":"A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files. Version 1.1.31 and older are believed to be affected."}]},{"artifact":{"id":"6f8cd7c3a35a2135","cpes":["cpe:2.3:a:yum-plugin-ovl:yum-plugin-ovl:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum-plugin-ovl:yum_plugin_ovl:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum_plugin_ovl:yum-plugin-ovl:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum_plugin_ovl:yum_plugin_ovl:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum-plugin:yum-plugin-ovl:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum-plugin:yum_plugin_ovl:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum_plugin:yum-plugin-ovl:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum_plugin:yum_plugin_ovl:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:yum-plugin-ovl:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:yum_plugin_ovl:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum:yum-plugin-ovl:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum:yum_plugin_ovl:1.1.31-42.el7:*:*:*:*:*:*:*"],"name":"yum-plugin-ovl","purl":"pkg:rpm/centos/yum-plugin-ovl@1.1.31-42.el7?arch=noarch&distro=centos-7&upstream=yum-utils-1.1.31-42.el7.src.rpm","type":"rpm","version":"1.1.31-42.el7","language":"","licenses":["GPLv2+"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"yum-utils","version":"1.1.31-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.1.31-46.el7_5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-10897","versionConstraint":"< 0:1.1.31-46.el7_5 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"yum-utils","version":"1.1.31-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-10897","fix":{"state":"fixed","versions":["0:1.1.31-46.el7_5"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:1.1.31-46.el7_5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-10897","cwe":"CWE-59","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-10897","cwe":"CWE-22","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-10897","date":"2026-10-08","epss":0.05638,"percentile":0.92757}],"risk":4.59497,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:2285","link":"https://access.redhat.com/errata/RHSA-2018:2285"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-10897","description":"A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files."},"relatedVulnerabilities":[{"id":"CVE-2018-10897","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","metrics":{"baseScore":9.3,"impactScore":10.1,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-10897","cwe":"CWE-59","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-10897","cwe":"CWE-22","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-10897","date":"2026-10-08","epss":0.05638,"percentile":0.92757}],"urls":["http://www.securitytracker.com/id/1041594","https://access.redhat.com/errata/RHSA-2018:2284","https://access.redhat.com/errata/RHSA-2018:2285","https://access.redhat.com/errata/RHSA-2018:2626","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10897","https://github.com/rpm-software-management/yum-utils/commit/6a8de061f8fdc885e74ebe8c94625bf53643b71c","https://github.com/rpm-software-management/yum-utils/commit/7554c0133eb830a71dc01846037cc047d0acbc2c","https://github.com/rpm-software-management/yum-utils/pull/43","https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-10897","description":"A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files. Version 1.1.31 and older are believed to be affected."}]},{"artifact":{"id":"689f317bc5e945fe","cpes":["cpe:2.3:a:yum-utils:yum-utils:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum-utils:yum_utils:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum_utils:yum-utils:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum_utils:yum_utils:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:yum-utils:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:yum_utils:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum:yum-utils:1.1.31-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:yum:yum_utils:1.1.31-42.el7:*:*:*:*:*:*:*"],"name":"yum-utils","purl":"pkg:rpm/centos/yum-utils@1.1.31-42.el7?arch=noarch&distro=centos-7&upstream=yum-utils-1.1.31-42.el7.src.rpm","type":"rpm","version":"1.1.31-42.el7","language":"","licenses":["GPLv2+"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.1.31-46.el7_5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-10897","versionConstraint":"< 0:1.1.31-46.el7_5 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"yum-utils","version":"0:1.1.31-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-10897","fix":{"state":"fixed","versions":["0:1.1.31-46.el7_5"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:1.1.31-46.el7_5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-10897","cwe":"CWE-59","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-10897","cwe":"CWE-22","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-10897","date":"2026-10-08","epss":0.05638,"percentile":0.92757}],"risk":4.59497,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:2285","link":"https://access.redhat.com/errata/RHSA-2018:2285"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-10897","description":"A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files."},"relatedVulnerabilities":[{"id":"CVE-2018-10897","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","metrics":{"baseScore":9.3,"impactScore":10.1,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-10897","cwe":"CWE-59","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-10897","cwe":"CWE-22","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-10897","date":"2026-10-08","epss":0.05638,"percentile":0.92757}],"urls":["http://www.securitytracker.com/id/1041594","https://access.redhat.com/errata/RHSA-2018:2284","https://access.redhat.com/errata/RHSA-2018:2285","https://access.redhat.com/errata/RHSA-2018:2626","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10897","https://github.com/rpm-software-management/yum-utils/commit/6a8de061f8fdc885e74ebe8c94625bf53643b71c","https://github.com/rpm-software-management/yum-utils/commit/7554c0133eb830a71dc01846037cc047d0acbc2c","https://github.com/rpm-software-management/yum-utils/pull/43","https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-10897","description":"A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files. Version 1.1.31 and older are believed to be affected."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-8394","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8394","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8394","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8394","date":"2026-10-08","epss":0.04815,"percentile":0.91741}],"risk":4.5261000000000005,"urls":[],"severity":"Critical","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8394","description":"PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."},"relatedVulnerabilities":[{"id":"CVE-2015-8394","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8394","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8394","date":"2026-10-08","epss":0.04815,"percentile":0.91741}],"urls":["http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html","http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup","http://www.openwall.com/lists/oss-security/2015/11/29/1","http://www.securityfocus.com/bid/82990","https://bto.bluecoat.com/security-advisory/sa128","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731","https://security.gentoo.org/glsa/201607-02","https://security.netapp.com/advisory/ntap-20230216-0002/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8394","description":"PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."}]},{"artifact":{"id":"74815ef1ea59fa2c","cpes":["cpe:2.3:a:centos:pcre:8.32-17.el7:*:*:*:*:*:*:*","cpe:2.3:a:pcre:pcre:8.32-17.el7:*:*:*:*:*:*:*"],"name":"pcre","purl":"pkg:rpm/centos/pcre@8.32-17.el7?arch=x86_64&distro=centos-7&upstream=pcre-8.32-17.el7.src.rpm","type":"rpm","version":"8.32-17.el7","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-8394","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"pcre","version":"0:8.32-17.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8394","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8394","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8394","date":"2026-10-08","epss":0.04815,"percentile":0.91741}],"risk":4.5261000000000005,"urls":[],"severity":"Critical","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8394","description":"PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."},"relatedVulnerabilities":[{"id":"CVE-2015-8394","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8394","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8394","date":"2026-10-08","epss":0.04815,"percentile":0.91741}],"urls":["http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html","http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup","http://www.openwall.com/lists/oss-security/2015/11/29/1","http://www.securityfocus.com/bid/82990","https://bto.bluecoat.com/security-advisory/sa128","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731","https://security.gentoo.org/glsa/201607-02","https://security.netapp.com/advisory/ntap-20230216-0002/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8394","description":"PCRE before 8.38 mishandles the (?(<digits>) and (?(R<digits>) conditions, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-8817","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-8817","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-8817","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-8817","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-8817","date":"2026-10-08","epss":0.11175,"percentile":0.95853}],"risk":4.525875,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-8817","description":"The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character."},"relatedVulnerabilities":[{"id":"CVE-2017-8817","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-8817","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-8817","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-8817","date":"2026-10-08","epss":0.11175,"percentile":0.95853}],"urls":["http://security.cucumberlinux.com/security/details.php?id=162","http://www.securityfocus.com/bid/102057","http://www.securitytracker.com/id/1039897","https://access.redhat.com/errata/RHSA-2018:3558","https://curl.haxx.se/docs/adv_2017-ae72.html","https://lists.debian.org/debian-lts-announce/2017/11/msg00040.html","https://security.gentoo.org/glsa/201712-04","https://www.debian.org/security/2017/dsa-4051"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-8817","description":"The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-8817","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-8817","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-8817","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-8817","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-8817","date":"2026-10-08","epss":0.11175,"percentile":0.95853}],"risk":4.525875,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-8817","description":"The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character."},"relatedVulnerabilities":[{"id":"CVE-2017-8817","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-8817","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-8817","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-8817","date":"2026-10-08","epss":0.11175,"percentile":0.95853}],"urls":["http://security.cucumberlinux.com/security/details.php?id=162","http://www.securityfocus.com/bid/102057","http://www.securitytracker.com/id/1039897","https://access.redhat.com/errata/RHSA-2018:3558","https://curl.haxx.se/docs/adv_2017-ae72.html","https://lists.debian.org/debian-lts-announce/2017/11/msg00040.html","https://security.gentoo.org/glsa/201712-04","https://www.debian.org/security/2017/dsa-4051"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-8817","description":"The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-80.el7_6"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-10160","versionConstraint":"< 0:2.7.5-80.el7_6 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-10160","fix":{"state":"fixed","versions":["0:2.7.5-80.el7_6"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-80.el7_6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-10160","cwe":"CWE-172","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-10160","cwe":"CWE-522","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-10160","date":"2026-10-08","epss":0.05227,"percentile":0.92305}],"risk":4.521355,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:1587","link":"https://access.redhat.com/errata/RHSA-2019:1587"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-10160","description":"A security regression of CVE-2019-9636 was discovered in python, since commit d537ab0ff9767ef024f26246899728f0116b1ec3, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application."},"relatedVulnerabilities":[{"id":"CVE-2019-10160","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-10160","cwe":"CWE-172","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-10160","cwe":"CWE-522","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-10160","date":"2026-10-08","epss":0.05227,"percentile":0.92305}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00042.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","https://access.redhat.com/errata/RHSA-2019:1587","https://access.redhat.com/errata/RHSA-2019:1700","https://access.redhat.com/errata/RHSA-2019:2437","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10160","https://github.com/python/cpython/commit/250b62acc59921d399f0db47db3b462cd6037e09","https://github.com/python/cpython/commit/8d0ef0b5edeae52960c7ed05ae8a12388324f87e","https://github.com/python/cpython/commit/f61599b050c621386a3fc6bc480359e2d3bb93de","https://github.com/python/cpython/commit/fd1771dbdd28709716bd531580c40ae5ed814468","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NF3DRDGMVIRYNZMSLJIHNW47HOUQYXVG/","https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization2.html","https://security.netapp.com/advisory/ntap-20190617-0003/","https://usn.ubuntu.com/4127-1/","https://usn.ubuntu.com/4127-2/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-10160","description":"A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-80.el7_6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-10160","versionConstraint":"< 0:2.7.5-80.el7_6 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-10160","fix":{"state":"fixed","versions":["0:2.7.5-80.el7_6"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-80.el7_6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-10160","cwe":"CWE-172","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-10160","cwe":"CWE-522","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-10160","date":"2026-10-08","epss":0.05227,"percentile":0.92305}],"risk":4.521355,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:1587","link":"https://access.redhat.com/errata/RHSA-2019:1587"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-10160","description":"A security regression of CVE-2019-9636 was discovered in python, since commit d537ab0ff9767ef024f26246899728f0116b1ec3, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application."},"relatedVulnerabilities":[{"id":"CVE-2019-10160","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-10160","cwe":"CWE-172","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-10160","cwe":"CWE-522","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-10160","date":"2026-10-08","epss":0.05227,"percentile":0.92305}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00042.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","https://access.redhat.com/errata/RHSA-2019:1587","https://access.redhat.com/errata/RHSA-2019:1700","https://access.redhat.com/errata/RHSA-2019:2437","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10160","https://github.com/python/cpython/commit/250b62acc59921d399f0db47db3b462cd6037e09","https://github.com/python/cpython/commit/8d0ef0b5edeae52960c7ed05ae8a12388324f87e","https://github.com/python/cpython/commit/f61599b050c621386a3fc6bc480359e2d3bb93de","https://github.com/python/cpython/commit/fd1771dbdd28709716bd531580c40ae5ed814468","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NF3DRDGMVIRYNZMSLJIHNW47HOUQYXVG/","https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization2.html","https://security.netapp.com/advisory/ntap-20190617-0003/","https://usn.ubuntu.com/4127-1/","https://usn.ubuntu.com/4127-2/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-10160","description":"A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-260.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-11236","versionConstraint":"< 0:2.17-260.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-11236","fix":{"state":"fixed","versions":["0:2.17-260.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.17-260.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-11236","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-11236","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-11236","date":"2026-10-08","epss":0.07051,"percentile":0.9404}],"risk":4.51264,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3092","link":"https://access.redhat.com/errata/RHSA-2018:3092"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-11236","description":"stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2018-11236","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-11236","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-11236","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-11236","date":"2026-10-08","epss":0.07051,"percentile":0.9404}],"urls":["http://www.securityfocus.com/bid/104255","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3092","https://security.netapp.com/advisory/ntap-20190329-0001/","https://security.netapp.com/advisory/ntap-20190401-0001/","https://sourceware.org/bugzilla/show_bug.cgi?id=22786","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=5460617d1567657621107d895ee2dd83bc1f88f2","https://usn.ubuntu.com/4416-1/","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-11236","description":"stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-260.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-11236","versionConstraint":"< 0:2.17-260.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-11236","fix":{"state":"fixed","versions":["0:2.17-260.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.17-260.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-11236","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-11236","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-11236","date":"2026-10-08","epss":0.07051,"percentile":0.9404}],"risk":4.51264,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3092","link":"https://access.redhat.com/errata/RHSA-2018:3092"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-11236","description":"stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2018-11236","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-11236","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-11236","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-11236","date":"2026-10-08","epss":0.07051,"percentile":0.9404}],"urls":["http://www.securityfocus.com/bid/104255","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3092","https://security.netapp.com/advisory/ntap-20190329-0001/","https://security.netapp.com/advisory/ntap-20190401-0001/","https://sourceware.org/bugzilla/show_bug.cgi?id=22786","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=5460617d1567657621107d895ee2dd83bc1f88f2","https://usn.ubuntu.com/4416-1/","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-11236","description":"stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-12.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-20843","versionConstraint":"< 0:2.1.0-12.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-20843","fix":{"state":"fixed","versions":["0:2.1.0-12.el7"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:2.1.0-12.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20843","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-20843","cwe":"CWE-611","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-20843","date":"2026-10-08","epss":0.07107,"percentile":0.94086}],"risk":4.441875,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:3952","link":"https://access.redhat.com/errata/RHSA-2020:3952"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-20843","description":"It was discovered that the \"setElementTypePrefix()\" function incorrectly extracted XML namespace prefixes. By tricking an application into processing a specially crafted XML file, an attacker could cause unusually high consumption of memory resources and possibly lead to a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2018-20843","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.8,"impactScore":6.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20843","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-20843","cwe":"CWE-611","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-20843","date":"2026-10-08","epss":0.07107,"percentile":0.94086}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00039.html","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5226","https://github.com/libexpat/libexpat/blob/R_2_2_7/expat/Changes","https://github.com/libexpat/libexpat/issues/186","https://github.com/libexpat/libexpat/pull/262","https://github.com/libexpat/libexpat/pull/262/commits/11f8838bf99ea0a6f0b76f9760c43704d00c4ff6","https://lists.debian.org/debian-lts-announce/2019/06/msg00028.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CEJJSQSG3KSUQY4FPVHZ7ZTT7FORMFVD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IDAUGEB3TUP6NEKJDBUBZX7N5OAUOOOK/","https://seclists.org/bugtraq/2019/Jun/39","https://security.gentoo.org/glsa/201911-08","https://security.netapp.com/advisory/ntap-20190703-0001/","https://support.f5.com/csp/article/K51011533","https://usn.ubuntu.com/4040-1/","https://usn.ubuntu.com/4040-2/","https://www.debian.org/security/2019/dsa-4472","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.tenable.com/security/tns-2021-11"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20843","description":"In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks)."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7_9.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-4658","versionConstraint":"< 0:2.9.1-6.el7_9.6 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-4658","fix":{"state":"fixed","versions":["0:2.9.1-6.el7_9.6"],"available":[{"date":"2021-10-14","kind":"first-observed","version":"0:2.9.1-6.el7_9.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-4658","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4658","date":"2026-10-08","epss":0.08559,"percentile":0.9494}],"risk":4.407885,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:3810","link":"https://access.redhat.com/errata/RHSA-2021:3810"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-4658","description":"A use-after-free flaw was found in the Xpointer implementation of libxml2. An attacker could use this flaw against an application parsing untrusted XML files and compiled with libxml2 to leak small amount of memory data."},"relatedVulnerabilities":[{"id":"CVE-2016-4658","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-4658","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4658","date":"2026-10-08","epss":0.08559,"percentile":0.9494}],"urls":["http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html","http://www.securityfocus.com/bid/93054","http://www.securitytracker.com/id/1036858","http://www.securitytracker.com/id/1038623","https://git.gnome.org/browse/libxml2/commit/?id=c1d1f7121194036608bf555f08d3062a36fd344b","https://security.gentoo.org/glsa/201701-37","https://support.apple.com/HT207141","https://support.apple.com/HT207142","https://support.apple.com/HT207143","https://support.apple.com/HT207170"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-4658","description":"xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7_9.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-4658","versionConstraint":"< 0:2.9.1-6.el7_9.6 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-4658","fix":{"state":"fixed","versions":["0:2.9.1-6.el7_9.6"],"available":[{"date":"2021-10-14","kind":"first-observed","version":"0:2.9.1-6.el7_9.6"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-4658","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4658","date":"2026-10-08","epss":0.08559,"percentile":0.9494}],"risk":4.407885,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:3810","link":"https://access.redhat.com/errata/RHSA-2021:3810"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-4658","description":"A use-after-free flaw was found in the Xpointer implementation of libxml2. An attacker could use this flaw against an application parsing untrusted XML files and compiled with libxml2 to leak small amount of memory data."},"relatedVulnerabilities":[{"id":"CVE-2016-4658","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-4658","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4658","date":"2026-10-08","epss":0.08559,"percentile":0.9494}],"urls":["http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html","http://www.securityfocus.com/bid/93054","http://www.securitytracker.com/id/1036858","http://www.securitytracker.com/id/1038623","https://git.gnome.org/browse/libxml2/commit/?id=c1d1f7121194036608bf555f08d3062a36fd344b","https://security.gentoo.org/glsa/201701-37","https://support.apple.com/HT207141","https://support.apple.com/HT207142","https://support.apple.com/HT207143","https://support.apple.com/HT207170"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-4658","description":"xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-8390","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8390","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8390","cwe":"CWE-908","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8390","date":"2026-10-08","epss":0.04656,"percentile":0.91504}],"risk":4.37664,"urls":[],"severity":"Critical","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8390","description":"PCRE before 8.38 mishandles the [: and \\\\ substrings in character classes, which allows remote attackers to cause a denial of service (uninitialized memory read) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."},"relatedVulnerabilities":[{"id":"CVE-2015-8390","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8390","cwe":"CWE-908","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8390","date":"2026-10-08","epss":0.04656,"percentile":0.91504}],"urls":["http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html","http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup","http://www.openwall.com/lists/oss-security/2015/11/29/1","http://www.securityfocus.com/bid/82990","https://bto.bluecoat.com/security-advisory/sa128","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731","https://security.gentoo.org/glsa/201607-02","https://security.netapp.com/advisory/ntap-20230216-0002/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8390","description":"PCRE before 8.38 mishandles the [: and \\\\ substrings in character classes, which allows remote attackers to cause a denial of service (uninitialized memory read) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."}]},{"artifact":{"id":"74815ef1ea59fa2c","cpes":["cpe:2.3:a:centos:pcre:8.32-17.el7:*:*:*:*:*:*:*","cpe:2.3:a:pcre:pcre:8.32-17.el7:*:*:*:*:*:*:*"],"name":"pcre","purl":"pkg:rpm/centos/pcre@8.32-17.el7?arch=x86_64&distro=centos-7&upstream=pcre-8.32-17.el7.src.rpm","type":"rpm","version":"8.32-17.el7","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-8390","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"pcre","version":"0:8.32-17.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8390","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8390","cwe":"CWE-908","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8390","date":"2026-10-08","epss":0.04656,"percentile":0.91504}],"risk":4.37664,"urls":[],"severity":"Critical","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8390","description":"PCRE before 8.38 mishandles the [: and \\\\ substrings in character classes, which allows remote attackers to cause a denial of service (uninitialized memory read) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."},"relatedVulnerabilities":[{"id":"CVE-2015-8390","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8390","cwe":"CWE-908","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8390","date":"2026-10-08","epss":0.04656,"percentile":0.91504}],"urls":["http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html","http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup","http://www.openwall.com/lists/oss-security/2015/11/29/1","http://www.securityfocus.com/bid/82990","https://bto.bluecoat.com/security-advisory/sa128","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731","https://security.gentoo.org/glsa/201607-02","https://security.netapp.com/advisory/ntap-20230216-0002/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8390","description":"PCRE before 8.38 mishandles the [: and \\\\ substrings in character classes, which allows remote attackers to cause a denial of service (uninitialized memory read) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."}]},{"artifact":{"id":"2439f8bce118b50f","cpes":["cpe:2.3:a:centos:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*"],"name":"sqlite","purl":"pkg:rpm/centos/sqlite@3.7.17-8.el7?arch=x86_64&distro=centos-7&upstream=sqlite-3.7.17-8.el7.src.rpm","type":"rpm","version":"3.7.17-8.el7","language":"","licenses":["Public Domain"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-19880","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"sqlite","version":"0:3.7.17-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-19880","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-19880","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-19880","date":"2026-10-08","epss":0.06937,"percentile":0.9395}],"risk":4.335625,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-19880","description":"exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled."},"relatedVulnerabilities":[{"id":"CVE-2019-19880","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-19880","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-19880","date":"2026-10-08","epss":0.06937,"percentile":0.9395}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html","http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html","http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html","https://access.redhat.com/errata/RHSA-2020:0514","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://github.com/sqlite/sqlite/commit/75e95e1fcd52d3ec8282edb75ac8cd0814095d54","https://security.netapp.com/advisory/ntap-20200114-0001/","https://usn.ubuntu.com/4298-1/","https://www.debian.org/security/2020/dsa-4638","https://www.oracle.com/security-alerts/cpuapr2020.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-19880","description":"exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.56.1-2.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-4200","versionConstraint":"< 0:2.56.1-2.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-4200","fix":{"state":"fixed","versions":["0:2.56.1-2.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:2.56.1-2.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-4200","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-4200","date":"2026-10-08","epss":0.08583,"percentile":0.9495}],"risk":4.2915,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3140","link":"https://access.redhat.com/errata/RHSA-2018:3140"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-4200","description":"An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free."},"relatedVulnerabilities":[{"id":"CVE-2018-4200","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-4200","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-4200","date":"2026-10-08","epss":0.08583,"percentile":0.9495}],"urls":["http://www.securityfocus.com/bid/103961","http://www.securitytracker.com/id/1040743","https://bugs.chromium.org/p/project-zero/issues/detail?id=1525","https://security.gentoo.org/glsa/201808-04","https://support.apple.com/HT208741","https://support.apple.com/HT208743","https://support.apple.com/HT208850","https://support.apple.com/HT208852","https://support.apple.com/HT208853","https://usn.ubuntu.com/3640-1/","https://www.exploit-db.com/exploits/44566/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-4200","description":"An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free."}]},{"artifact":{"id":"920b5d4d13067767","cpes":["cpe:2.3:a:gobject-introspection:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject-introspection:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject_introspection:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject_introspection:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*"],"name":"gobject-introspection","purl":"pkg:rpm/centos/gobject-introspection@1.50.0-1.el7?arch=x86_64&distro=centos-7&upstream=gobject-introspection-1.50.0-1.el7.src.rpm","type":"rpm","version":"1.50.0-1.el7","language":"","licenses":["GPLv2+, LGPLv2+, MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.56.1-1.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-4200","versionConstraint":"< 0:1.56.1-1.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gobject-introspection","version":"0:1.50.0-1.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-4200","fix":{"state":"fixed","versions":["0:1.56.1-1.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:1.56.1-1.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-4200","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-4200","date":"2026-10-08","epss":0.08583,"percentile":0.9495}],"risk":4.2915,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3140","link":"https://access.redhat.com/errata/RHSA-2018:3140"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-4200","description":"An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free."},"relatedVulnerabilities":[{"id":"CVE-2018-4200","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-4200","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-4200","date":"2026-10-08","epss":0.08583,"percentile":0.9495}],"urls":["http://www.securityfocus.com/bid/103961","http://www.securitytracker.com/id/1040743","https://bugs.chromium.org/p/project-zero/issues/detail?id=1525","https://security.gentoo.org/glsa/201808-04","https://support.apple.com/HT208741","https://support.apple.com/HT208743","https://support.apple.com/HT208850","https://support.apple.com/HT208852","https://support.apple.com/HT208853","https://usn.ubuntu.com/3640-1/","https://www.exploit-db.com/exploits/44566/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-4200","description":"An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-0391","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-0391","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-0391","cwe":"CWE-74","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-0391","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-0391","date":"2026-10-08","epss":0.08325,"percentile":0.94816}],"risk":4.287375,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-0391","description":"A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\\r' and '\\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks."},"relatedVulnerabilities":[{"id":"CVE-2022-0391","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-0391","cwe":"CWE-74","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-0391","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-0391","date":"2026-10-08","epss":0.08325,"percentile":0.94816}],"urls":["https://bugs.python.org/issue43882","https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CSD2YBXP3ZF44E44QMIIAR5VTO35KTRB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDBDBAU6HUPZHISBOARTXZ5GKHF2VH5U/","https://security.gentoo.org/glsa/202305-02","https://security.netapp.com/advisory/ntap-20220225-0009/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html","https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-0391","description":"A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\\r' and '\\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-0391","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-0391","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-0391","cwe":"CWE-74","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-0391","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-0391","date":"2026-10-08","epss":0.08325,"percentile":0.94816}],"risk":4.287375,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-0391","description":"A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\\r' and '\\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks."},"relatedVulnerabilities":[{"id":"CVE-2022-0391","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-0391","cwe":"CWE-74","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-0391","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-0391","date":"2026-10-08","epss":0.08325,"percentile":0.94816}],"urls":["https://bugs.python.org/issue43882","https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CSD2YBXP3ZF44E44QMIIAR5VTO35KTRB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDBDBAU6HUPZHISBOARTXZ5GKHF2VH5U/","https://security.gentoo.org/glsa/202305-02","https://security.netapp.com/advisory/ntap-20220225-0009/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html","https://lists.debian.org/debian-lts-announce/2025/03/msg00013.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-0391","description":"A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\\r' and '\\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-14.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-25235","versionConstraint":"< 0:2.1.0-14.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-25235","fix":{"state":"fixed","versions":["0:2.1.0-14.el7_9"],"available":[{"date":"2022-03-29","kind":"first-observed","version":"0:2.1.0-14.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-25235","cwe":"CWE-116","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-25235","cwe":"CWE-116","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-25235","date":"2026-10-08","epss":0.04955,"percentile":0.91956}],"risk":4.286074999999999,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:1069","link":"https://access.redhat.com/errata/RHSA-2022:1069"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-25235","description":"A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences (for example, from start tag names) to the XML processing application on top of expat can lead to arbitrary code execution. This issue is dependent on how invalid UTF-8 is handled inside the XML processor."},"relatedVulnerabilities":[{"id":"CVE-2022-25235","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-25235","cwe":"CWE-116","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-25235","cwe":"CWE-116","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-25235","date":"2026-10-08","epss":0.04955,"percentile":0.91956}],"urls":["http://www.openwall.com/lists/oss-security/2022/02/19/1","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://github.com/libexpat/libexpat/pull/562","https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","https://security.gentoo.org/glsa/202209-24","https://security.netapp.com/advisory/ntap-20220303-0008/","https://www.debian.org/security/2022/dsa-5085","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-25235","description":"xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-14.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-22822","versionConstraint":"< 0:2.1.0-14.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-22822","fix":{"state":"fixed","versions":["0:2.1.0-14.el7_9"],"available":[{"date":"2022-03-29","kind":"first-observed","version":"0:2.1.0-14.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-22822","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-22822","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-22822","date":"2026-10-08","epss":0.04829,"percentile":0.9176}],"risk":4.177085,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:1069","link":"https://access.redhat.com/errata/RHSA-2022:1069"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-22822","description":"expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability confidentiality and integrity."},"relatedVulnerabilities":[{"id":"CVE-2022-22822","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-22822","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-22822","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-22822","date":"2026-10-08","epss":0.04829,"percentile":0.9176}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/17/3","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://github.com/libexpat/libexpat/pull/539","https://security.gentoo.org/glsa/202209-24","https://www.debian.org/security/2022/dsa-5073","https://www.tenable.com/security/tns-2022-05"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-22822","description":"addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-14.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-25315","versionConstraint":"< 0:2.1.0-14.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-25315","fix":{"state":"fixed","versions":["0:2.1.0-14.el7_9"],"available":[{"date":"2022-03-29","kind":"first-observed","version":"0:2.1.0-14.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-25315","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-25315","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-25315","date":"2026-10-08","epss":0.04821,"percentile":0.91746}],"risk":4.170165,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:1069","link":"https://access.redhat.com/errata/RHSA-2022:1069"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-25315","description":"An integer overflow was found in expat. The issue occurs in storeRawNames() by abusing the m_buffer expansion logic to allow allocations very close to INT_MAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2022-25315","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-25315","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-25315","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-25315","date":"2026-10-08","epss":0.04821,"percentile":0.91746}],"urls":["http://www.openwall.com/lists/oss-security/2022/02/19/1","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://github.com/libexpat/libexpat/pull/559","https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","https://security.gentoo.org/glsa/202209-24","https://security.netapp.com/advisory/ntap-20220303-0008/","https://www.debian.org/security/2022/dsa-5085","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-25315","description":"In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames."}]},{"artifact":{"id":"003478dd56ddcbab","cpes":["cpe:2.3:a:centos:gzip:1.5-9.el7:*:*:*:*:*:*:*","cpe:2.3:a:gzip:gzip:1.5-9.el7:*:*:*:*:*:*:*"],"name":"gzip","purl":"pkg:rpm/centos/gzip@1.5-9.el7?arch=x86_64&distro=centos-7&upstream=gzip-1.5-9.el7.src.rpm","type":"rpm","version":"1.5-9.el7","language":"","licenses":["GPLv3+ and GFDL"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.5-11.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-1271","versionConstraint":"< 0:1.5-11.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gzip","version":"0:1.5-9.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-1271","fix":{"state":"fixed","versions":["0:1.5-11.el7_9"],"available":[{"date":"2022-05-13","kind":"first-observed","version":"0:1.5-11.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1271","cwe":"CWE-179","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1271","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1271","date":"2026-10-08","epss":0.0507,"percentile":0.92107}],"risk":4.1320500000000004,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:2191","link":"https://access.redhat.com/errata/RHSA-2022:2191"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-1271","description":"An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system."},"relatedVulnerabilities":[{"id":"CVE-2022-1271","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1271","cwe":"CWE-179","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1271","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1271","date":"2026-10-08","epss":0.0507,"percentile":0.92107}],"urls":["https://access.redhat.com/security/cve/CVE-2022-1271","https://bugzilla.redhat.com/show_bug.cgi?id=2073310","https://git.tukaani.org/?p=xz.git%3Ba=commit%3Bh=69d1b3fc29677af8ade8dc15dba83f0589cb63d6","https://lists.gnu.org/r/bug-gzip/2022-04/msg00011.html","https://security-tracker.debian.org/tracker/CVE-2022-1271","https://security.gentoo.org/glsa/202209-01","https://security.netapp.com/advisory/ntap-20220930-0006/","https://tukaani.org/xz/xzgrep-ZDI-CAN-16587.patch","https://www.openwall.com/lists/oss-security/2022/04/07/8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1271","description":"An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system."}]},{"artifact":{"id":"1401ca8d8d5b653d","cpes":["cpe:2.3:a:centos:xz:5.2.2-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:xz:xz:5.2.2-1.el7:*:*:*:*:*:*:*"],"name":"xz","purl":"pkg:rpm/centos/xz@5.2.2-1.el7?arch=x86_64&distro=centos-7&upstream=xz-5.2.2-1.el7.src.rpm","type":"rpm","version":"5.2.2-1.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:5.2.2-2.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-1271","versionConstraint":"< 0:5.2.2-2.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"xz","version":"0:5.2.2-1.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-1271","fix":{"state":"fixed","versions":["0:5.2.2-2.el7_9"],"available":[{"date":"2022-06-16","kind":"first-observed","version":"0:5.2.2-2.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1271","cwe":"CWE-179","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1271","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1271","date":"2026-10-08","epss":0.0507,"percentile":0.92107}],"risk":4.1320500000000004,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:5052","link":"https://access.redhat.com/errata/RHSA-2022:5052"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-1271","description":"An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system."},"relatedVulnerabilities":[{"id":"CVE-2022-1271","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1271","cwe":"CWE-179","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1271","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1271","date":"2026-10-08","epss":0.0507,"percentile":0.92107}],"urls":["https://access.redhat.com/security/cve/CVE-2022-1271","https://bugzilla.redhat.com/show_bug.cgi?id=2073310","https://git.tukaani.org/?p=xz.git%3Ba=commit%3Bh=69d1b3fc29677af8ade8dc15dba83f0589cb63d6","https://lists.gnu.org/r/bug-gzip/2022-04/msg00011.html","https://security-tracker.debian.org/tracker/CVE-2022-1271","https://security.gentoo.org/glsa/202209-01","https://security.netapp.com/advisory/ntap-20220930-0006/","https://tukaani.org/xz/xzgrep-ZDI-CAN-16587.patch","https://www.openwall.com/lists/oss-security/2022/04/07/8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1271","description":"An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system."}]},{"artifact":{"id":"59fbfd22cd8e9ea4","cpes":["cpe:2.3:a:xz-libs:xz-libs:5.2.2-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:xz-libs:xz_libs:5.2.2-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:xz_libs:xz-libs:5.2.2-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:xz_libs:xz_libs:5.2.2-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:xz-libs:5.2.2-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:xz_libs:5.2.2-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:xz:xz-libs:5.2.2-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:xz:xz_libs:5.2.2-1.el7:*:*:*:*:*:*:*"],"name":"xz-libs","purl":"pkg:rpm/centos/xz-libs@5.2.2-1.el7?arch=x86_64&distro=centos-7&upstream=xz-5.2.2-1.el7.src.rpm","type":"rpm","version":"5.2.2-1.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"xz","version":"5.2.2-1.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:5.2.2-2.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-1271","versionConstraint":"< 0:5.2.2-2.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"xz","version":"5.2.2-1.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-1271","fix":{"state":"fixed","versions":["0:5.2.2-2.el7_9"],"available":[{"date":"2022-06-16","kind":"first-observed","version":"0:5.2.2-2.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1271","cwe":"CWE-179","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1271","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1271","date":"2026-10-08","epss":0.0507,"percentile":0.92107}],"risk":4.1320500000000004,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:5052","link":"https://access.redhat.com/errata/RHSA-2022:5052"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-1271","description":"An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system."},"relatedVulnerabilities":[{"id":"CVE-2022-1271","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-1271","cwe":"CWE-179","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2022-1271","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-1271","date":"2026-10-08","epss":0.0507,"percentile":0.92107}],"urls":["https://access.redhat.com/security/cve/CVE-2022-1271","https://bugzilla.redhat.com/show_bug.cgi?id=2073310","https://git.tukaani.org/?p=xz.git%3Ba=commit%3Bh=69d1b3fc29677af8ade8dc15dba83f0589cb63d6","https://lists.gnu.org/r/bug-gzip/2022-04/msg00011.html","https://security-tracker.debian.org/tracker/CVE-2022-1271","https://security.gentoo.org/glsa/202209-01","https://security.netapp.com/advisory/ntap-20220930-0006/","https://tukaani.org/xz/xzgrep-ZDI-CAN-16587.patch","https://www.openwall.com/lists/oss-security/2022/04/07/8"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-1271","description":"An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system."}]},{"artifact":{"id":"2439f8bce118b50f","cpes":["cpe:2.3:a:centos:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*"],"name":"sqlite","purl":"pkg:rpm/centos/sqlite@3.7.17-8.el7?arch=x86_64&distro=centos-7&upstream=sqlite-3.7.17-8.el7.src.rpm","type":"rpm","version":"3.7.17-8.el7","language":"","licenses":["Public Domain"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-19924","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"sqlite","version":"0:3.7.17-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-19924","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-19924","cwe":"CWE-755","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-19924","date":"2026-10-08","epss":0.07856,"percentile":0.94553}],"risk":4.04584,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-19924","description":"SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling."},"relatedVulnerabilities":[{"id":"CVE-2019-19924","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-19924","cwe":"CWE-755","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-19924","date":"2026-10-08","epss":0.07856,"percentile":0.94553}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://github.com/sqlite/sqlite/commit/8654186b0236d556aa85528c2573ee0b6ab71be3","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.netapp.com/advisory/ntap-20200114-0003/","https://usn.ubuntu.com/4298-1/","https://www.oracle.com/security-alerts/cpuapr2020.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-19924","description":"SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-22.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-23841","versionConstraint":"< 1:1.0.2k-22.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-23841","fix":{"state":"fixed","versions":["1:1.0.2k-22.el7_9"],"available":[{"date":"2021-10-14","kind":"first-observed","version":"1:1.0.2k-22.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-23841","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-23841","date":"2026-10-08","epss":0.0741,"percentile":0.94291}],"risk":4.03845,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:3798","link":"https://access.redhat.com/errata/RHSA-2021:3798"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-23841","description":"The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack."},"relatedVulnerabilities":[{"id":"CVE-2021-23841","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-23841","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-23841","date":"2026-10-08","epss":0.0741,"percentile":0.94291}],"urls":["http://seclists.org/fulldisclosure/2021/May/67","http://seclists.org/fulldisclosure/2021/May/68","http://seclists.org/fulldisclosure/2021/May/70","https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807","https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846","https://security.gentoo.org/glsa/202103-03","https://security.netapp.com/advisory/ntap-20210219-0009/","https://security.netapp.com/advisory/ntap-20210513-0002/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://support.apple.com/kb/HT212528","https://support.apple.com/kb/HT212529","https://support.apple.com/kb/HT212534","https://www.debian.org/security/2021/dsa-4855","https://www.openssl.org/news/secadv/20210216.txt","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.tenable.com/security/tns-2021-03","https://www.tenable.com/security/tns-2021-09"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-23841","description":"The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x)."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-26.P2.el7_9.2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-8623","versionConstraint":"< 32:9.11.4-26.P2.el7_9.2 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-8623","fix":{"state":"fixed","versions":["32:9.11.4-26.P2.el7_9.2"],"available":[{"date":"2020-11-11","kind":"first-observed","version":"32:9.11.4-26.P2.el7_9.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8623","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8623","date":"2026-10-08","epss":0.064,"percentile":0.935}],"risk":4,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:5011","link":"https://access.redhat.com/errata/RHSA-2020:5011"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-8623","description":"A flaw was found in bind. An assertion failure can occur when a specially crafted query for a zone signed with an RSA key. BIND must be compiled with \"--enable-native-pkcs11\" for the system to be affected. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-8623","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8623","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8623","date":"2026-10-08","epss":0.064,"percentile":0.935}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html","http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html","https://kb.isc.org/docs/cve-2020-8623","https://lists.debian.org/debian-lts-announce/2020/08/msg00053.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQN62GBMCIC5AY4KYADGXNKVY6AJKSJE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKAMJZXR66P6S5LEU4SN7USSNCWTXEXP/","https://security.gentoo.org/glsa/202008-19","https://security.netapp.com/advisory/ntap-20200827-0003/","https://usn.ubuntu.com/4468-1/","https://www.debian.org/security/2020/dsa-4752","https://www.synology.com/security/advisory/Synology_SA_20_19"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-8623","description":"In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the system must: * be running BIND that was built with \"--enable-native-pkcs11\" * be signing one or more zones with an RSA key * be able to receive queries from a possible attacker"}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-32208","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-32208","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-32208","cwe":"CWE-840","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-32208","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-32208","date":"2026-10-08","epss":0.07499,"percentile":0.94338}],"risk":3.8619850000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-32208","description":"A vulnerability was found in curl. This issue occurs because it mishandles message verification failures when curl does FTP transfers secured by krb5. This flaw makes it possible for a Man-in-the-middle attack to go unnoticed and allows data injection into the client."},"relatedVulnerabilities":[{"id":"CVE-2022-32208","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-32208","cwe":"CWE-840","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-32208","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-32208","date":"2026-10-08","epss":0.07499,"percentile":0.94338}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/41","https://hackerone.com/reports/1590071","https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/","https://security.gentoo.org/glsa/202212-01","https://security.netapp.com/advisory/ntap-20220915-0003/","https://support.apple.com/kb/HT213488","https://www.debian.org/security/2022/dsa-5197"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-32208","description":"When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-32208","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-32208","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-32208","cwe":"CWE-840","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-32208","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-32208","date":"2026-10-08","epss":0.07499,"percentile":0.94338}],"risk":3.8619850000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-32208","description":"A vulnerability was found in curl. This issue occurs because it mishandles message verification failures when curl does FTP transfers secured by krb5. This flaw makes it possible for a Man-in-the-middle attack to go unnoticed and allows data injection into the client."},"relatedVulnerabilities":[{"id":"CVE-2022-32208","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-32208","cwe":"CWE-840","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-32208","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-32208","date":"2026-10-08","epss":0.07499,"percentile":0.94338}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/28","http://seclists.org/fulldisclosure/2022/Oct/41","https://hackerone.com/reports/1590071","https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/","https://security.gentoo.org/glsa/202212-01","https://security.netapp.com/advisory/ntap-20220915-0003/","https://support.apple.com/kb/HT213488","https://www.debian.org/security/2022/dsa-5197"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-32208","description":"When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-5073","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-5073","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-5073","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2015-5073","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-5073","date":"2026-10-08","epss":0.07673,"percentile":0.94445}],"risk":3.8365000000000005,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-5073","description":"Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis."},"relatedVulnerabilities":[{"id":"CVE-2015-5073","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-5073","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2015-5073","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-5073","date":"2026-10-08","epss":0.07673,"percentile":0.94445}],"urls":["http://rhn.redhat.com/errata/RHSA-2016-1025.html","http://rhn.redhat.com/errata/RHSA-2016-2750.html","http://vcs.pcre.org/pcre/code/trunk/ChangeLog?revision=1609&view=markup","http://vcs.pcre.org/pcre?view=revision&revision=1571","http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886","http://www.openwall.com/lists/oss-security/2015/06/26/1","http://www.openwall.com/lists/oss-security/2015/06/26/3","http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","http://www.securityfocus.com/bid/75430","http://www.securitytracker.com/id/1033154","https://access.redhat.com/errata/RHSA-2016:1132","https://bugs.exim.org/show_bug.cgi?id=1651","https://security.gentoo.org/glsa/201607-02"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-5073","description":"Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of service (crash) or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an excess closing parenthesis."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-51.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1000121","versionConstraint":"< 0:7.29.0-51.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000121","fix":{"state":"fixed","versions":["0:7.29.0-51.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-51.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000121","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000121","date":"2026-10-08","epss":0.09205,"percentile":0.95221}],"risk":3.8200750000000006,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000121","description":"A NULL pointer dereference flaw was found in the way libcurl checks values returned by the openldap ldap_get_attribute_ber() function. A malicious LDAP server could use this flaw to crash a libcurl client application via a specially crafted LDAP reply."},"relatedVulnerabilities":[{"id":"CVE-2018-1000121","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000121","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000121","date":"2026-10-08","epss":0.09205,"percentile":0.95221}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/103415","http://www.securitytracker.com/id/1040529","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-97a2.html","https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html","https://usn.ubuntu.com/3598-1/","https://usn.ubuntu.com/3598-2/","https://www.debian.org/security/2018/dsa-4136","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000121","description":"A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service"}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-51.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-1000121","versionConstraint":"< 0:7.29.0-51.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000121","fix":{"state":"fixed","versions":["0:7.29.0-51.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-51.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000121","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000121","date":"2026-10-08","epss":0.09205,"percentile":0.95221}],"risk":3.8200750000000006,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000121","description":"A NULL pointer dereference flaw was found in the way libcurl checks values returned by the openldap ldap_get_attribute_ber() function. A malicious LDAP server could use this flaw to crash a libcurl client application via a specially crafted LDAP reply."},"relatedVulnerabilities":[{"id":"CVE-2018-1000121","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000121","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000121","date":"2026-10-08","epss":0.09205,"percentile":0.95221}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/103415","http://www.securitytracker.com/id/1040529","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-97a2.html","https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html","https://usn.ubuntu.com/3598-1/","https://usn.ubuntu.com/3598-2/","https://www.debian.org/security/2018/dsa-4136","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000121","description":"A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service"}]},{"artifact":{"id":"5253e5996daa37c8","cpes":["cpe:2.3:a:nss-pem:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss-pem:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_pem:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_pem:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*"],"name":"nss-pem","purl":"pkg:rpm/centos/nss-pem@1.0.3-4.el7?arch=x86_64&distro=centos-7&upstream=nss-pem-1.0.3-4.el7.src.rpm","type":"rpm","version":"1.0.3-4.el7","language":"","licenses":["MPLv1.1"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.0.3-5.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1000121","versionConstraint":"< 0:1.0.3-5.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-pem","version":"0:1.0.3-4.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000121","fix":{"state":"fixed","versions":["0:1.0.3-5.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:1.0.3-5.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000121","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000121","date":"2026-10-08","epss":0.09205,"percentile":0.95221}],"risk":3.8200750000000006,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000121","description":"A NULL pointer dereference flaw was found in the way libcurl checks values returned by the openldap ldap_get_attribute_ber() function. A malicious LDAP server could use this flaw to crash a libcurl client application via a specially crafted LDAP reply."},"relatedVulnerabilities":[{"id":"CVE-2018-1000121","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000121","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1000121","date":"2026-10-08","epss":0.09205,"percentile":0.95221}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/103415","http://www.securitytracker.com/id/1040529","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-97a2.html","https://lists.debian.org/debian-lts-announce/2018/03/msg00012.html","https://usn.ubuntu.com/3598-1/","https://usn.ubuntu.com/3598-2/","https://www.debian.org/security/2018/dsa-4136","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000121","description":"A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service"}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-8492","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-8492","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8492","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-8492","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-8492","date":"2026-10-08","epss":0.06617,"percentile":0.9369}],"risk":3.804775,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-8492","description":"An uncontrolled resource consumption vulnerability was discovered in python in the class AbstractBasicAuthHandler, due to the kind of regular expression used while handling an authentication request in the http_error_auth_reqed method. Client applications that use, directly or indirectly, AbstractBasicAuthHandler to connect to a malicious server may be vulnerable to this flaw, which would cause an uncontrolled use of CPU resources on the victim's system, resulting in a Denial of Service."},"relatedVulnerabilities":[{"id":"CVE-2020-8492","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8492","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-8492","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-8492","date":"2026-10-08","epss":0.06617,"percentile":0.9369}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00003.html","https://bugs.python.org/issue39503","https://github.com/python/cpython/pull/18284","https://lists.apache.org/thread.html/rdb31a608dd6758c6093fd645aea3fbf022dd25b37109b6aaea5bc0b5%40%3Ccommits.cassandra.apache.org%3E","https://lists.apache.org/thread.html/rfec113c733162b39633fd86a2d0f34bf42ac35f711b3ec1835c774da%40%3Ccommits.cassandra.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WOKDEXLYW5UQ4S7PA7E37IITOC7C56J/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5NSAX4SC3V64PGZUPH7PRDLSON34Q5A/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APGWEMYZIY5VHLCSZ3HD67PA5Z2UQFGH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UESGYI5XDAHJBATEZN3MHNDUBDH47AS6/","https://python-security.readthedocs.io/vuln/urllib-basic-auth-regex.html","https://security.gentoo.org/glsa/202005-09","https://security.netapp.com/advisory/ntap-20200221-0001/","https://usn.ubuntu.com/4333-1/","https://usn.ubuntu.com/4333-2/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-8492","description":"Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-8492","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-8492","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8492","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-8492","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-8492","date":"2026-10-08","epss":0.06617,"percentile":0.9369}],"risk":3.804775,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-8492","description":"An uncontrolled resource consumption vulnerability was discovered in python in the class AbstractBasicAuthHandler, due to the kind of regular expression used while handling an authentication request in the http_error_auth_reqed method. Client applications that use, directly or indirectly, AbstractBasicAuthHandler to connect to a malicious server may be vulnerable to this flaw, which would cause an uncontrolled use of CPU resources on the victim's system, resulting in a Denial of Service."},"relatedVulnerabilities":[{"id":"CVE-2020-8492","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8492","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-8492","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-8492","date":"2026-10-08","epss":0.06617,"percentile":0.9369}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00003.html","https://bugs.python.org/issue39503","https://github.com/python/cpython/pull/18284","https://lists.apache.org/thread.html/rdb31a608dd6758c6093fd645aea3fbf022dd25b37109b6aaea5bc0b5%40%3Ccommits.cassandra.apache.org%3E","https://lists.apache.org/thread.html/rfec113c733162b39633fd86a2d0f34bf42ac35f711b3ec1835c774da%40%3Ccommits.cassandra.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WOKDEXLYW5UQ4S7PA7E37IITOC7C56J/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5NSAX4SC3V64PGZUPH7PRDLSON34Q5A/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APGWEMYZIY5VHLCSZ3HD67PA5Z2UQFGH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UESGYI5XDAHJBATEZN3MHNDUBDH47AS6/","https://python-security.readthedocs.io/vuln/urllib-basic-auth-regex.html","https://security.gentoo.org/glsa/202005-09","https://security.netapp.com/advisory/ntap-20200221-0001/","https://usn.ubuntu.com/4333-1/","https://usn.ubuntu.com/4333-2/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-8492","description":"Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-51.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1000007","versionConstraint":"< 0:7.29.0-51.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000007","fix":{"state":"fixed","versions":["0:7.29.0-51.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-51.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-1000007","date":"2026-10-08","epss":0.06578,"percentile":0.93662}],"risk":3.78235,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000007","description":"It was found that curl and libcurl might send their Authentication header to a third party HTTP server upon receiving an HTTP REDIRECT reply. This could leak authentication token to external entities."},"relatedVulnerabilities":[{"id":"CVE-2018-1000007","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-1000007","date":"2026-10-08","epss":0.06578,"percentile":0.93662}],"urls":["http://www.openwall.com/lists/oss-security/2022/04/27/4","http://www.securitytracker.com/id/1040274","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2019:1543","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-b3bf.html","https://lists.debian.org/debian-lts-announce/2018/01/msg00038.html","https://usn.ubuntu.com/3554-1/","https://usn.ubuntu.com/3554-2/","https://www.debian.org/security/2018/dsa-4098","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000007","description":"libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-51.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-1000007","versionConstraint":"< 0:7.29.0-51.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000007","fix":{"state":"fixed","versions":["0:7.29.0-51.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-51.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-1000007","date":"2026-10-08","epss":0.06578,"percentile":0.93662}],"risk":3.78235,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000007","description":"It was found that curl and libcurl might send their Authentication header to a third party HTTP server upon receiving an HTTP REDIRECT reply. This could leak authentication token to external entities."},"relatedVulnerabilities":[{"id":"CVE-2018-1000007","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-1000007","date":"2026-10-08","epss":0.06578,"percentile":0.93662}],"urls":["http://www.openwall.com/lists/oss-security/2022/04/27/4","http://www.securitytracker.com/id/1040274","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2019:1543","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-b3bf.html","https://lists.debian.org/debian-lts-announce/2018/01/msg00038.html","https://usn.ubuntu.com/3554-1/","https://usn.ubuntu.com/3554-2/","https://www.debian.org/security/2018/dsa-4098","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000007","description":"libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request."}]},{"artifact":{"id":"5253e5996daa37c8","cpes":["cpe:2.3:a:nss-pem:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss-pem:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_pem:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_pem:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*"],"name":"nss-pem","purl":"pkg:rpm/centos/nss-pem@1.0.3-4.el7?arch=x86_64&distro=centos-7&upstream=nss-pem-1.0.3-4.el7.src.rpm","type":"rpm","version":"1.0.3-4.el7","language":"","licenses":["MPLv1.1"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.0.3-5.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1000007","versionConstraint":"< 0:1.0.3-5.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-pem","version":"0:1.0.3-4.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000007","fix":{"state":"fixed","versions":["0:1.0.3-5.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:1.0.3-5.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-1000007","date":"2026-10-08","epss":0.06578,"percentile":0.93662}],"risk":3.78235,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000007","description":"It was found that curl and libcurl might send their Authentication header to a third party HTTP server upon receiving an HTTP REDIRECT reply. This could leak authentication token to external entities."},"relatedVulnerabilities":[{"id":"CVE-2018-1000007","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-1000007","date":"2026-10-08","epss":0.06578,"percentile":0.93662}],"urls":["http://www.openwall.com/lists/oss-security/2022/04/27/4","http://www.securitytracker.com/id/1040274","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2019:1543","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-b3bf.html","https://lists.debian.org/debian-lts-announce/2018/01/msg00038.html","https://usn.ubuntu.com/3554-1/","https://usn.ubuntu.com/3554-2/","https://www.debian.org/security/2018/dsa-4098","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000007","description":"libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request."}]},{"artifact":{"id":"a97aad0351fb3a68","cpes":["cpe:2.3:a:bzip2-libs:bzip2-libs:1.0.6-13.el7:*:*:*:*:*:*:*","cpe:2.3:a:bzip2-libs:bzip2_libs:1.0.6-13.el7:*:*:*:*:*:*:*","cpe:2.3:a:bzip2_libs:bzip2-libs:1.0.6-13.el7:*:*:*:*:*:*:*","cpe:2.3:a:bzip2_libs:bzip2_libs:1.0.6-13.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bzip2-libs:1.0.6-13.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bzip2_libs:1.0.6-13.el7:*:*:*:*:*:*:*","cpe:2.3:a:bzip2:bzip2-libs:1.0.6-13.el7:*:*:*:*:*:*:*","cpe:2.3:a:bzip2:bzip2_libs:1.0.6-13.el7:*:*:*:*:*:*:*"],"name":"bzip2-libs","purl":"pkg:rpm/centos/bzip2-libs@1.0.6-13.el7?arch=x86_64&distro=centos-7&upstream=bzip2-1.0.6-13.el7.src.rpm","type":"rpm","version":"1.0.6-13.el7","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bzip2","version":"1.0.6-13.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-12900","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bzip2","version":"1.0.6-13.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-12900","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-12900","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-12900","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-12900","date":"2026-10-08","epss":0.07977,"percentile":0.94615}],"risk":3.74919,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-12900","description":"A data integrity error was found in the bzip2 (User-space package) functionality when decompressing. This issue occurs when a user decompresses a particular kind of .bz2 files. A local user could get unexpected results (or corrupted data) as result of decompressing these files."},"relatedVulnerabilities":[{"id":"CVE-2019-12900","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-12900","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-12900","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-12900","date":"2026-10-08","epss":0.07977,"percentile":0.94615}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00050.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00078.html","http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00000.html","http://packetstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.html","http://packetstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.html","https://gitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbc","https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E","https://lists.apache.org/thread.html/rce8cd8c30f60604b580ea01bebda8a671a25c9a1629f409fc24e7774%40%3Cuser.flink.apache.org%3E","https://lists.apache.org/thread.html/rda98305669476c4d90cc8527c4deda7e449019dd1fe9936b56671dd4%40%3Cuser.flink.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/06/msg00021.html","https://lists.debian.org/debian-lts-announce/2019/07/msg00014.html","https://lists.debian.org/debian-lts-announce/2019/10/msg00012.html","https://lists.debian.org/debian-lts-announce/2019/10/msg00018.html","https://seclists.org/bugtraq/2019/Aug/4","https://seclists.org/bugtraq/2019/Jul/22","https://security.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.asc","https://support.f5.com/csp/article/K68713584?utm_source=f5support&amp%3Butm_medium=RSS","https://usn.ubuntu.com/4038-1/","https://usn.ubuntu.com/4038-2/","https://usn.ubuntu.com/4146-1/","https://usn.ubuntu.com/4146-2/","https://www.oracle.com/security-alerts/cpuoct2020.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-12900","description":"BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-40304","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-40304","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40304","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-40304","cwe":"CWE-415","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-40304","date":"2026-10-08","epss":0.05812,"percentile":0.9295}],"risk":3.7196800000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-40304","description":"A flaw was found in libxml2. When a reference cycle is detected in the XML entity cleanup function the XML entity data can be stored in a dictionary. In this case, the dictionary becomes corrupted resulting in logic errors, including memory errors like double free."},"relatedVulnerabilities":[{"id":"CVE-2022-40304","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40304","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-40304","cwe":"CWE-415","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-40304","date":"2026-10-08","epss":0.05812,"percentile":0.9295}],"urls":["http://seclists.org/fulldisclosure/2022/Dec/21","http://seclists.org/fulldisclosure/2022/Dec/24","http://seclists.org/fulldisclosure/2022/Dec/25","http://seclists.org/fulldisclosure/2022/Dec/26","http://seclists.org/fulldisclosure/2022/Dec/27","https://gitlab.gnome.org/GNOME/libxml2/-/commit/1b41ec4e9433b05bb0376be4725804c54ef1d80b","https://gitlab.gnome.org/GNOME/libxml2/-/tags","https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3","https://security.netapp.com/advisory/ntap-20221209-0003/","https://support.apple.com/kb/HT213531","https://support.apple.com/kb/HT213533","https://support.apple.com/kb/HT213534","https://support.apple.com/kb/HT213535","https://support.apple.com/kb/HT213536"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-40304","description":"An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-40304","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-40304","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40304","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-40304","cwe":"CWE-415","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-40304","date":"2026-10-08","epss":0.05812,"percentile":0.9295}],"risk":3.7196800000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-40304","description":"A flaw was found in libxml2. When a reference cycle is detected in the XML entity cleanup function the XML entity data can be stored in a dictionary. In this case, the dictionary becomes corrupted resulting in logic errors, including memory errors like double free."},"relatedVulnerabilities":[{"id":"CVE-2022-40304","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40304","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-40304","cwe":"CWE-415","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-40304","date":"2026-10-08","epss":0.05812,"percentile":0.9295}],"urls":["http://seclists.org/fulldisclosure/2022/Dec/21","http://seclists.org/fulldisclosure/2022/Dec/24","http://seclists.org/fulldisclosure/2022/Dec/25","http://seclists.org/fulldisclosure/2022/Dec/26","http://seclists.org/fulldisclosure/2022/Dec/27","https://gitlab.gnome.org/GNOME/libxml2/-/commit/1b41ec4e9433b05bb0376be4725804c54ef1d80b","https://gitlab.gnome.org/GNOME/libxml2/-/tags","https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.10.3","https://security.netapp.com/advisory/ntap-20221209-0003/","https://support.apple.com/kb/HT213531","https://support.apple.com/kb/HT213533","https://support.apple.com/kb/HT213534","https://support.apple.com/kb/HT213535","https://support.apple.com/kb/HT213536"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-40304","description":"An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-16932","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-16932","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16932","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-16932","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-16932","date":"2026-10-08","epss":0.05928,"percentile":0.93071}],"risk":3.705,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-16932","description":"parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities."},"relatedVulnerabilities":[{"id":"CVE-2017-16932","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16932","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-16932","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-16932","date":"2026-10-08","epss":0.05928,"percentile":0.93071}],"urls":["http://xmlsoft.org/news.html","https://blog.clamav.net/2018/07/clamav-01001-has-been-released.html","https://bugzilla.gnome.org/show_bug.cgi?id=759579","https://github.com/GNOME/libxml2/commit/899a5d9f0ed13b8e32449a08a361e0de127dd961","https://gitlab.gnome.org/GNOME/libxml2/-/commit/899a5d9f0ed13b8e32449a08a361e0de127dd961","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2017/11/msg00041.html","https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html","https://usn.ubuntu.com/3739-1/","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-16932","description":"parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-16932","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-16932","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16932","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-16932","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-16932","date":"2026-10-08","epss":0.05928,"percentile":0.93071}],"risk":3.705,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-16932","description":"parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities."},"relatedVulnerabilities":[{"id":"CVE-2017-16932","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16932","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-16932","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-16932","date":"2026-10-08","epss":0.05928,"percentile":0.93071}],"urls":["http://xmlsoft.org/news.html","https://blog.clamav.net/2018/07/clamav-01001-has-been-released.html","https://bugzilla.gnome.org/show_bug.cgi?id=759579","https://github.com/GNOME/libxml2/commit/899a5d9f0ed13b8e32449a08a361e0de127dd961","https://gitlab.gnome.org/GNOME/libxml2/-/commit/899a5d9f0ed13b8e32449a08a361e0de127dd961","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2017/11/msg00041.html","https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html","https://usn.ubuntu.com/3739-1/","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-16932","description":"parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-1000254","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-1000254","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-1000254","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-1000254","date":"2026-10-08","epss":0.08465,"percentile":0.94889}],"risk":3.682275,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-1000254","description":"libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote."},"relatedVulnerabilities":[{"id":"CVE-2017-1000254","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-1000254","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-1000254","date":"2026-10-08","epss":0.08465,"percentile":0.94889}],"urls":["http://www.debian.org/security/2017/dsa-3992","http://www.securityfocus.com/bid/101115","http://www.securitytracker.com/id/1039509","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://curl.haxx.se/673d0cd8.patch","https://curl.haxx.se/docs/adv_20171004.html","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201712-04","https://support.apple.com/HT208331"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000254","description":"libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-1000254","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-1000254","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-1000254","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-1000254","date":"2026-10-08","epss":0.08465,"percentile":0.94889}],"risk":3.682275,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-1000254","description":"libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote."},"relatedVulnerabilities":[{"id":"CVE-2017-1000254","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-1000254","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-1000254","date":"2026-10-08","epss":0.08465,"percentile":0.94889}],"urls":["http://www.debian.org/security/2017/dsa-3992","http://www.securityfocus.com/bid/101115","http://www.securitytracker.com/id/1039509","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://curl.haxx.se/673d0cd8.patch","https://curl.haxx.se/docs/adv_20171004.html","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201712-04","https://support.apple.com/HT208331"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000254","description":"libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD` command. The server then responds with a 257 response containing the path, inside double quotes. The returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for this directory name, a directory name passed like this but without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are not aware of any exploit of this flaw. This bug was introduced in commit [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the parser always zero terminates the string but also rejects it if not terminated properly with a final double quote."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-3153","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-3153","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-3153","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-3153","date":"2026-10-08","epss":0.07337,"percentile":0.94244}],"risk":3.6685000000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-3153","description":"The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents."},"relatedVulnerabilities":[{"id":"CVE-2015-3153","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-3153","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-3153","date":"2026-10-08","epss":0.07337,"percentile":0.94244}],"urls":["http://curl.haxx.se/docs/adv_20150429.html","http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743","http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","http://lists.opensuse.org/opensuse-updates/2015-05/msg00017.html","http://www.debian.org/security/2015/dsa-3240","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","http://www.securityfocus.com/bid/74408","http://www.securitytracker.com/id/1032233","http://www.ubuntu.com/usn/USN-2591-1","https://kc.mcafee.com/corporate/index?page=content&id=SB10131","https://support.apple.com/kb/HT205031"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-3153","description":"The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2015-3153","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-3153","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-3153","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-3153","date":"2026-10-08","epss":0.07337,"percentile":0.94244}],"risk":3.6685000000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-3153","description":"The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents."},"relatedVulnerabilities":[{"id":"CVE-2015-3153","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-3153","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-3153","date":"2026-10-08","epss":0.07337,"percentile":0.94244}],"urls":["http://curl.haxx.se/docs/adv_20150429.html","http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743","http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html","http://lists.opensuse.org/opensuse-updates/2015-05/msg00017.html","http://www.debian.org/security/2015/dsa-3240","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","http://www.securityfocus.com/bid/74408","http://www.securitytracker.com/id/1032233","http://www.ubuntu.com/usn/USN-2591-1","https://kc.mcafee.com/corporate/index?page=content&id=SB10131","https://support.apple.com/kb/HT205031"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-3153","description":"The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-92.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-26116","versionConstraint":"< 0:2.7.5-92.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-26116","fix":{"state":"fixed","versions":["0:2.7.5-92.el7_9"],"available":[{"date":"2022-06-29","kind":"first-observed","version":"0:2.7.5-92.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-26116","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-26116","date":"2026-10-08","epss":0.06358,"percentile":0.93473}],"risk":3.655849999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:5235","link":"https://access.redhat.com/errata/RHSA-2022:5235"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-26116","description":"A flaw was found in Python. The built-in modules httplib and http.client (included in Python 2 and Python 3, respectively) do not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation to the request by injecting additional HTTP headers. The highest threat from this vulnerability is to confidentiality and integrity."},"relatedVulnerabilities":[{"id":"CVE-2020-26116","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":7.2,"impactScore":2.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-26116","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-26116","date":"2026-10-08","epss":0.06358,"percentile":0.93473}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00027.html","https://bugs.python.org/issue39603","https://lists.debian.org/debian-lts-announce/2020/11/msg00032.html","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BW4GCLQISJCOEGQNIMVUZDQMIY6RR6CC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HDQ2THWU4GPV4Y5H5WW5PFMSWXL2CRFD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWMAVY4T4257AZHTF2RZJKNJNSJFY24O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OXI72HIHMXCQFWTULUXDG7VDA2BCYL4Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QOX7DGMMWWL6POCRYGAUCISOLR2IG3XV/","https://python-security.readthedocs.io/vuln/http-header-injection-method.html","https://security.gentoo.org/glsa/202101-18","https://security.netapp.com/advisory/ntap-20201023-0001/","https://usn.ubuntu.com/4581-1/","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-26116","description":"http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-92.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-26116","versionConstraint":"< 0:2.7.5-92.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-26116","fix":{"state":"fixed","versions":["0:2.7.5-92.el7_9"],"available":[{"date":"2022-06-29","kind":"first-observed","version":"0:2.7.5-92.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-26116","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-26116","date":"2026-10-08","epss":0.06358,"percentile":0.93473}],"risk":3.655849999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:5235","link":"https://access.redhat.com/errata/RHSA-2022:5235"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-26116","description":"A flaw was found in Python. The built-in modules httplib and http.client (included in Python 2 and Python 3, respectively) do not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation to the request by injecting additional HTTP headers. The highest threat from this vulnerability is to confidentiality and integrity."},"relatedVulnerabilities":[{"id":"CVE-2020-26116","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":7.2,"impactScore":2.8,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-26116","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-26116","date":"2026-10-08","epss":0.06358,"percentile":0.93473}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00027.html","https://bugs.python.org/issue39603","https://lists.debian.org/debian-lts-announce/2020/11/msg00032.html","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BW4GCLQISJCOEGQNIMVUZDQMIY6RR6CC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HDQ2THWU4GPV4Y5H5WW5PFMSWXL2CRFD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWMAVY4T4257AZHTF2RZJKNJNSJFY24O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OXI72HIHMXCQFWTULUXDG7VDA2BCYL4Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QOX7DGMMWWL6POCRYGAUCISOLR2IG3XV/","https://python-security.readthedocs.io/vuln/http-header-injection-method.html","https://security.gentoo.org/glsa/202101-18","https://security.netapp.com/advisory/ntap-20201023-0001/","https://usn.ubuntu.com/4581-1/","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-26116","description":"http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-16.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-0737","versionConstraint":"< 1:1.0.2k-16.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-0737","fix":{"state":"fixed","versions":["1:1.0.2k-16.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"1:1.0.2k-16.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":2.6,"exploitabilityScore":0.8},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-0737","cwe":"CWE-327","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-0737","date":"2026-10-08","epss":0.11597,"percentile":0.95945}],"risk":3.6530549999999993,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3221","link":"https://access.redhat.com/errata/RHSA-2018:3221"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-0737","description":"OpenSSL RSA key generation was found to be vulnerable to cache side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover parts of the private key."},"relatedVulnerabilities":[{"id":"CVE-2018-0737","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-0737","cwe":"CWE-327","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-0737","date":"2026-10-08","epss":0.11597,"percentile":0.95945}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/103766","http://www.securitytracker.com/id/1040685","https://access.redhat.com/errata/RHSA-2018:3221","https://access.redhat.com/errata/RHSA-2018:3505","https://access.redhat.com/errata/RHSA-2019:3932","https://access.redhat.com/errata/RHSA-2019:3933","https://access.redhat.com/errata/RHSA-2019:3935","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=349a41da1ad88ad87825414752a8ff5fdd6a6c3f","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6939eab03a6e23d2bd2c3f5e34fe1d48e542e787","https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/","https://security.gentoo.org/glsa/201811-21","https://security.netapp.com/advisory/ntap-20180726-0003/","https://securityadvisories.paloaltonetworks.com/Home/Detail/133","https://usn.ubuntu.com/3628-1/","https://usn.ubuntu.com/3628-2/","https://usn.ubuntu.com/3692-1/","https://usn.ubuntu.com/3692-2/","https://www.debian.org/security/2018/dsa-4348","https://www.debian.org/security/2018/dsa-4355","https://www.openssl.org/news/secadv/20180416.txt","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.tenable.com/security/tns-2018-12","https://www.tenable.com/security/tns-2018-13","https://www.tenable.com/security/tns-2018-14","https://www.tenable.com/security/tns-2018-17"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-0737","description":"The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o)."}]},{"artifact":{"id":"f0be1ba1ba4d8506","cpes":["cpe:2.3:a:systemd:systemd:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:centos:systemd:219-42.el7_4.4:*:*:*:*:*:*:*"],"name":"systemd","purl":"pkg:rpm/centos/systemd@219-42.el7_4.4?arch=x86_64&distro=centos-7&upstream=systemd-219-42.el7_4.4.src.rpm","type":"rpm","version":"219-42.el7_4.4","language":"","licenses":["LGPLv2+ and MIT and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:219-42.el7_4.7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1049","versionConstraint":"< 0:219-42.el7_4.7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"systemd","version":"0:219-42.el7_4.4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1049","fix":{"state":"fixed","versions":["0:219-42.el7_4.7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:219-42.el7_4.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.5,"impactScore":3.6,"exploitabilityScore":1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1049","cwe":"CWE-362","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-1049","cwe":"CWE-362","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1049","date":"2026-10-08","epss":0.07441,"percentile":0.94306}],"risk":3.534475,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0260","link":"https://access.redhat.com/errata/RHSA-2018:0260"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1049","description":"A race condition was found in systemd. This could result in automount requests not being serviced and processes using them could hang, causing denial of service."},"relatedVulnerabilities":[{"id":"CVE-2018-1049","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1049","cwe":"CWE-362","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-1049","cwe":"CWE-362","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1049","date":"2026-10-08","epss":0.07441,"percentile":0.94306}],"urls":["http://www.securitytracker.com/id/1041520","https://access.redhat.com/errata/RHSA-2018:0260","https://bugzilla.redhat.com/show_bug.cgi?id=1534701","https://lists.debian.org/debian-lts-announce/2018/11/msg00017.html","https://usn.ubuntu.com/3558-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1049","description":"In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted."}]},{"artifact":{"id":"6ec9c6d20c7e2032","cpes":["cpe:2.3:a:systemd-libs:systemd-libs:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:systemd-libs:systemd_libs:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:systemd_libs:systemd-libs:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:systemd_libs:systemd_libs:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:systemd:systemd-libs:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:systemd:systemd_libs:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:centos:systemd-libs:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:centos:systemd_libs:219-42.el7_4.4:*:*:*:*:*:*:*"],"name":"systemd-libs","purl":"pkg:rpm/centos/systemd-libs@219-42.el7_4.4?arch=x86_64&distro=centos-7&upstream=systemd-219-42.el7_4.4.src.rpm","type":"rpm","version":"219-42.el7_4.4","language":"","licenses":["LGPLv2+ and MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"systemd","version":"219-42.el7_4.4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:219-42.el7_4.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-1049","versionConstraint":"< 0:219-42.el7_4.7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"systemd","version":"219-42.el7_4.4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1049","fix":{"state":"fixed","versions":["0:219-42.el7_4.7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:219-42.el7_4.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.5,"impactScore":3.6,"exploitabilityScore":1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1049","cwe":"CWE-362","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-1049","cwe":"CWE-362","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1049","date":"2026-10-08","epss":0.07441,"percentile":0.94306}],"risk":3.534475,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0260","link":"https://access.redhat.com/errata/RHSA-2018:0260"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1049","description":"A race condition was found in systemd. This could result in automount requests not being serviced and processes using them could hang, causing denial of service."},"relatedVulnerabilities":[{"id":"CVE-2018-1049","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1049","cwe":"CWE-362","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-1049","cwe":"CWE-362","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1049","date":"2026-10-08","epss":0.07441,"percentile":0.94306}],"urls":["http://www.securitytracker.com/id/1041520","https://access.redhat.com/errata/RHSA-2018:0260","https://bugzilla.redhat.com/show_bug.cgi?id=1534701","https://lists.debian.org/debian-lts-announce/2018/11/msg00017.html","https://usn.ubuntu.com/3558-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1049","description":"In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-9063","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-9063","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9063","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9063","date":"2026-10-08","epss":0.05472,"percentile":0.92551}],"risk":3.50208,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-9063","description":"An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50."},"relatedVulnerabilities":[{"id":"CVE-2016-9063","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9063","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9063","date":"2026-10-08","epss":0.05472,"percentile":0.92551}],"urls":["http://www.securityfocus.com/bid/94337","http://www.securitytracker.com/id/1037298","http://www.securitytracker.com/id/1039427","https://bugzilla.mozilla.org/show_bug.cgi?id=1274777","https://www.debian.org/security/2017/dsa-3898","https://www.mozilla.org/security/advisories/mfsa2016-89/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-9063","description":"An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-12.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-15903","versionConstraint":"< 0:2.1.0-12.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-15903","fix":{"state":"fixed","versions":["0:2.1.0-12.el7"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:2.1.0-12.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-15903","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-15903","cwe":"CWE-776","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-15903","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-15903","date":"2026-10-08","epss":0.06643,"percentile":0.93704}],"risk":3.4875750000000005,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:3952","link":"https://access.redhat.com/errata/RHSA-2020:3952"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-15903","description":"In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read."},"relatedVulnerabilities":[{"id":"CVE-2019-15903","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-15903","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-15903","cwe":"CWE-776","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-15903","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-15903","date":"2026-10-08","epss":0.06643,"percentile":0.93704}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html","http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html","http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html","http://seclists.org/fulldisclosure/2019/Dec/23","http://seclists.org/fulldisclosure/2019/Dec/26","http://seclists.org/fulldisclosure/2019/Dec/27","http://seclists.org/fulldisclosure/2019/Dec/30","https://access.redhat.com/errata/RHSA-2019:3210","https://access.redhat.com/errata/RHSA-2019:3237","https://access.redhat.com/errata/RHSA-2019:3756","https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43","https://github.com/libexpat/libexpat/issues/317","https://github.com/libexpat/libexpat/issues/342","https://github.com/libexpat/libexpat/pull/318","https://lists.debian.org/debian-lts-announce/2019/11/msg00006.html","https://lists.debian.org/debian-lts-announce/2019/11/msg00017.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG/","https://seclists.org/bugtraq/2019/Dec/17","https://seclists.org/bugtraq/2019/Dec/21","https://seclists.org/bugtraq/2019/Dec/23","https://seclists.org/bugtraq/2019/Nov/1","https://seclists.org/bugtraq/2019/Nov/24","https://seclists.org/bugtraq/2019/Oct/29","https://seclists.org/bugtraq/2019/Sep/30","https://seclists.org/bugtraq/2019/Sep/37","https://security.gentoo.org/glsa/201911-08","https://security.netapp.com/advisory/ntap-20190926-0004/","https://support.apple.com/kb/HT210785","https://support.apple.com/kb/HT210788","https://support.apple.com/kb/HT210789","https://support.apple.com/kb/HT210790","https://support.apple.com/kb/HT210793","https://support.apple.com/kb/HT210794","https://support.apple.com/kb/HT210795","https://usn.ubuntu.com/4132-1/","https://usn.ubuntu.com/4132-2/","https://usn.ubuntu.com/4165-1/","https://usn.ubuntu.com/4202-1/","https://usn.ubuntu.com/4335-1/","https://www.debian.org/security/2019/dsa-4530","https://www.debian.org/security/2019/dsa-4549","https://www.debian.org/security/2019/dsa-4571","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpuoct2020.html","https://www.tenable.com/security/tns-2021-11"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-15903","description":"In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-19956","versionConstraint":"< 0:2.9.1-6.el7.5 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-19956","fix":{"state":"fixed","versions":["0:2.9.1-6.el7.5"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:2.9.1-6.el7.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-19956","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-19956","cwe":"CWE-772","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-19956","date":"2026-10-08","epss":0.0556,"percentile":0.92652}],"risk":3.4749999999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:3996","link":"https://access.redhat.com/errata/RHSA-2020:3996"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-19956","description":"xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs."},"relatedVulnerabilities":[{"id":"CVE-2019-19956","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-19956","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-19956","cwe":"CWE-772","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-19956","date":"2026-10-08","epss":0.0556,"percentile":0.92652}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html","http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00005.html","https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf","https://gitlab.gnome.org/GNOME/libxml2/commit/5a02583c7e683896d84878bd90641d8d9b0d0549","https://lists.debian.org/debian-lts-announce/2019/12/msg00032.html","https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/","https://security.netapp.com/advisory/ntap-20200114-0002/","https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08","https://usn.ubuntu.com/4274-1/","https://www.oracle.com/security-alerts/cpujul2020.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-19956","description":"xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-19956","versionConstraint":"< 0:2.9.1-6.el7.5 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-19956","fix":{"state":"fixed","versions":["0:2.9.1-6.el7.5"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:2.9.1-6.el7.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-19956","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-19956","cwe":"CWE-772","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-19956","date":"2026-10-08","epss":0.0556,"percentile":0.92652}],"risk":3.4749999999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:3996","link":"https://access.redhat.com/errata/RHSA-2020:3996"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-19956","description":"xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs."},"relatedVulnerabilities":[{"id":"CVE-2019-19956","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-19956","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-19956","cwe":"CWE-772","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-19956","date":"2026-10-08","epss":0.0556,"percentile":0.92652}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html","http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00005.html","https://cert-portal.siemens.com/productcert/pdf/ssa-292794.pdf","https://gitlab.gnome.org/GNOME/libxml2/commit/5a02583c7e683896d84878bd90641d8d9b0d0549","https://lists.debian.org/debian-lts-announce/2019/12/msg00032.html","https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/","https://security.netapp.com/advisory/ntap-20200114-0002/","https://us-cert.cisa.gov/ics/advisories/icsa-21-103-08","https://usn.ubuntu.com/4274-1/","https://www.oracle.com/security-alerts/cpujul2020.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-19956","description":"xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-26.P2.el7_9.7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-25214","versionConstraint":"< 32:9.11.4-26.P2.el7_9.7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-25214","fix":{"state":"fixed","versions":["32:9.11.4-26.P2.el7_9.7"],"available":[{"date":"2021-09-01","kind":"first-observed","version":"32:9.11.4-26.P2.el7_9.7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-25214","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-25214","date":"2026-10-08","epss":0.05989,"percentile":0.9313}],"risk":3.4436749999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:3325","link":"https://access.redhat.com/errata/RHSA-2021:3325"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-25214","description":"Incremental zone transfers (IXFR) provide a way of transferring changed portion(s) of a zone between servers. An IXFR stream containing SOA records with an owner name other than the transferred zone's apex may cause the receiving named server to inadvertently remove the SOA record for the zone in question from the zone database. This leads to an assertion failure when the next SOA refresh query for that zone is made."},"relatedVulnerabilities":[{"id":"CVE-2021-25214","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-25214","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-25214","date":"2026-10-08","epss":0.05989,"percentile":0.9313}],"urls":["http://www.openwall.com/lists/oss-security/2021/04/29/1","http://www.openwall.com/lists/oss-security/2021/04/29/2","http://www.openwall.com/lists/oss-security/2021/04/29/3","http://www.openwall.com/lists/oss-security/2021/04/29/4","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://kb.isc.org/v1/docs/cve-2021-25214","https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/","https://security.netapp.com/advisory/ntap-20210521-0006/","https://www.debian.org/security/2021/dsa-4909"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-25214","description":"In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a malformed IXFR triggering the flaw described above, the named process will terminate due to a failed assertion the next time the transferred secondary zone is refreshed."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-14.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-23852","versionConstraint":"< 0:2.1.0-14.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-23852","fix":{"state":"fixed","versions":["0:2.1.0-14.el7_9"],"available":[{"date":"2022-03-29","kind":"first-observed","version":"0:2.1.0-14.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23852","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23852","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23852","date":"2026-10-08","epss":0.04563,"percentile":0.9136}],"risk":3.3766199999999995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:1069","link":"https://access.redhat.com/errata/RHSA-2022:1069"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-23852","description":"expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability, confidentiality and integrity."},"relatedVulnerabilities":[{"id":"CVE-2022-23852","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23852","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23852","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23852","date":"2026-10-08","epss":0.04563,"percentile":0.9136}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://github.com/libexpat/libexpat/pull/550","https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","https://security.gentoo.org/glsa/202209-24","https://security.netapp.com/advisory/ntap-20220217-0001/","https://www.debian.org/security/2022/dsa-5073","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.tenable.com/security/tns-2022-05"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-23852","description":"Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES."}]},{"artifact":{"id":"7b77d95c84d8a04b","cpes":["cpe:2.3:a:cyrus-sasl-lib:cyrus-sasl-lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus-sasl-lib:cyrus_sasl_lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl_lib:cyrus-sasl-lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl_lib:cyrus_sasl_lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus-sasl:cyrus-sasl-lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus-sasl:cyrus_sasl_lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl:cyrus-sasl-lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl:cyrus_sasl_lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:cyrus-sasl-lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:cyrus_sasl_lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus:cyrus-sasl-lib:2.1.26-21.el7:*:*:*:*:*:*:*","cpe:2.3:a:cyrus:cyrus_sasl_lib:2.1.26-21.el7:*:*:*:*:*:*:*"],"name":"cyrus-sasl-lib","purl":"pkg:rpm/centos/cyrus-sasl-lib@2.1.26-21.el7?arch=x86_64&distro=centos-7&upstream=cyrus-sasl-2.1.26-21.el7.src.rpm","type":"rpm","version":"2.1.26-21.el7","language":"","licenses":["BSD with advertising"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"cyrus-sasl","version":"2.1.26-21.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.26-24.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-24407","versionConstraint":"< 0:2.1.26-24.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"cyrus-sasl","version":"2.1.26-21.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-24407","fix":{"state":"fixed","versions":["0:2.1.26-24.el7_9"],"available":[{"date":"2022-03-10","kind":"first-observed","version":"0:2.1.26-24.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-24407","cwe":"CWE-89","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-24407","date":"2026-10-08","epss":0.04123,"percentile":0.90534}],"risk":3.360245000000001,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:0666","link":"https://access.redhat.com/errata/RHSA-2022:0666"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-24407","description":"A flaw was found in the SQL plugin shipped with Cyrus SASL.  The vulnerability occurs due to failure to properly escape SQL input and leads to an improper input validation vulnerability. This flaw allows an attacker to execute arbitrary SQL commands and the ability to change the passwords for other accounts allowing escalation of privileges."},"relatedVulnerabilities":[{"id":"CVE-2022-24407","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":6.5,"impactScore":6.5,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-24407","cwe":"CWE-89","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-24407","date":"2026-10-08","epss":0.04123,"percentile":0.90534}],"urls":["http://www.openwall.com/lists/oss-security/2022/02/23/4","https://github.com/cyrusimap/cyrus-sasl/blob/fdcd13ceaef8de684dc69008011fa865c5b4a3ac/docsrc/sasl/release-notes/2.1/index.rst","https://lists.debian.org/debian-lts-announce/2022/03/msg00002.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4FIXU75Q6RBNK6UYM7MQ3TCFGXR7AX4U/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H26R4SMGM3WHXX4XYNNJB4YGFIL5UNF4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZZC6BMPI3V3MC2IGNLN377ETUWO7QBIH/","https://security.netapp.com/advisory/ntap-20221007-0003/","https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28","https://www.debian.org/security/2022/dsa-5087","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-24407","description":"In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-23308","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-23308","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23308","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23308","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23308","date":"2026-10-08","epss":0.0512,"percentile":0.9217}],"risk":3.3536,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-23308","description":"A flaw was found in libxml2. A call to the xmlGetID function can return a pointer already freed when parsing an XML document with the XML_PARSE_DTDVALID option and without the XML_PARSE_NOENT option, resulting in a use-after-free issue."},"relatedVulnerabilities":[{"id":"CVE-2022-23308","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23308","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23308","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23308","date":"2026-10-08","epss":0.0512,"percentile":0.9217}],"urls":["http://seclists.org/fulldisclosure/2022/May/33","http://seclists.org/fulldisclosure/2022/May/34","http://seclists.org/fulldisclosure/2022/May/35","http://seclists.org/fulldisclosure/2022/May/36","http://seclists.org/fulldisclosure/2022/May/37","http://seclists.org/fulldisclosure/2022/May/38","https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e","https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS","https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/","https://security.gentoo.org/glsa/202210-03","https://security.netapp.com/advisory/ntap-20220331-0008/","https://support.apple.com/kb/HT213253","https://support.apple.com/kb/HT213254","https://support.apple.com/kb/HT213255","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213257","https://support.apple.com/kb/HT213258","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-23308","description":"valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-23308","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-23308","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23308","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23308","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23308","date":"2026-10-08","epss":0.0512,"percentile":0.9217}],"risk":3.3536,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-23308","description":"A flaw was found in libxml2. A call to the xmlGetID function can return a pointer already freed when parsing an XML document with the XML_PARSE_DTDVALID option and without the XML_PARSE_NOENT option, resulting in a use-after-free issue."},"relatedVulnerabilities":[{"id":"CVE-2022-23308","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23308","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23308","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23308","date":"2026-10-08","epss":0.0512,"percentile":0.9217}],"urls":["http://seclists.org/fulldisclosure/2022/May/33","http://seclists.org/fulldisclosure/2022/May/34","http://seclists.org/fulldisclosure/2022/May/35","http://seclists.org/fulldisclosure/2022/May/36","http://seclists.org/fulldisclosure/2022/May/37","http://seclists.org/fulldisclosure/2022/May/38","https://github.com/GNOME/libxml2/commit/652dd12a858989b14eed4e84e453059cd3ba340e","https://gitlab.gnome.org/GNOME/libxml2/-/blob/v2.9.13/NEWS","https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LA3MWWAYZADWJ5F6JOUBX65UZAMQB7RF/","https://security.gentoo.org/glsa/202210-03","https://security.netapp.com/advisory/ntap-20220331-0008/","https://support.apple.com/kb/HT213253","https://support.apple.com/kb/HT213254","https://support.apple.com/kb/HT213255","https://support.apple.com/kb/HT213256","https://support.apple.com/kb/HT213257","https://support.apple.com/kb/HT213258","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-23308","description":"valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes."}]},{"artifact":{"id":"74815ef1ea59fa2c","cpes":["cpe:2.3:a:centos:pcre:8.32-17.el7:*:*:*:*:*:*:*","cpe:2.3:a:pcre:pcre:8.32-17.el7:*:*:*:*:*:*:*"],"name":"pcre","purl":"pkg:rpm/centos/pcre@8.32-17.el7?arch=x86_64&distro=centos-7&upstream=pcre-8.32-17.el7.src.rpm","type":"rpm","version":"8.32-17.el7","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-8380","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"pcre","version":"0:8.32-17.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8380","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8380","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8380","date":"2026-10-08","epss":0.04436,"percentile":0.91145}],"risk":3.3269999999999995,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8380","description":"The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \\01 string, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."},"relatedVulnerabilities":[{"id":"CVE-2015-8380","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8380","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8380","date":"2026-10-08","epss":0.04436,"percentile":0.91145}],"urls":["http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173700.html","http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup","http://www.openwall.com/lists/oss-security/2015/11/29/1","http://www.securityfocus.com/bid/77695","https://blog.fuzzing-project.org/29-Heap-Overflow-in-PCRE.html","https://bto.bluecoat.com/security-advisory/sa128","https://bugs.exim.org/show_bug.cgi?id=1637","https://security.gentoo.org/glsa/201607-02"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8380","description":"The pcre_exec function in pcre_exec.c in PCRE before 8.38 mishandles a // pattern with a \\01 string, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-8388","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8388","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-8388","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2015-8388","cwe":"CWE-185","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8388","date":"2026-10-08","epss":0.06587,"percentile":0.9367}],"risk":3.2935,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8388","description":"PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."},"relatedVulnerabilities":[{"id":"CVE-2015-8388","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8388","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2015-8388","cwe":"CWE-185","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8388","date":"2026-10-08","epss":0.06587,"percentile":0.9367}],"urls":["http://rhn.redhat.com/errata/RHSA-2016-1025.html","http://rhn.redhat.com/errata/RHSA-2016-2750.html","http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup","http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886","http://www.openwall.com/lists/oss-security/2015/11/29/1","http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","http://www.securityfocus.com/bid/85576","https://access.redhat.com/errata/RHSA-2016:1132","https://bto.bluecoat.com/security-advisory/sa128","https://security.gentoo.org/glsa/201607-02"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8388","description":"PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."}]},{"artifact":{"id":"74815ef1ea59fa2c","cpes":["cpe:2.3:a:centos:pcre:8.32-17.el7:*:*:*:*:*:*:*","cpe:2.3:a:pcre:pcre:8.32-17.el7:*:*:*:*:*:*:*"],"name":"pcre","purl":"pkg:rpm/centos/pcre@8.32-17.el7?arch=x86_64&distro=centos-7&upstream=pcre-8.32-17.el7.src.rpm","type":"rpm","version":"8.32-17.el7","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-8393","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"pcre","version":"0:8.32-17.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8393","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8393","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8393","date":"2026-10-08","epss":0.04371,"percentile":0.91017}],"risk":3.27825,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8393","description":"pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client."},"relatedVulnerabilities":[{"id":"CVE-2015-8393","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8393","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8393","date":"2026-10-08","epss":0.04371,"percentile":0.91017}],"urls":["http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html","http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup","http://www.openwall.com/lists/oss-security/2015/11/29/1","http://www.securityfocus.com/bid/82990","https://bto.bluecoat.com/security-advisory/sa128","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731","https://security.gentoo.org/glsa/201607-02","https://security.netapp.com/advisory/ntap-20230216-0002/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8393","description":"pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-5300","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-5300","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-5300","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-5300","date":"2026-10-08","epss":0.06539,"percentile":0.9363}],"risk":3.2695000000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-5300","description":"The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876."},"relatedVulnerabilities":[{"id":"CVE-2016-5300","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.8,"impactScore":6.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-5300","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-5300","date":"2026-10-08","epss":0.06539,"percentile":0.9363}],"urls":["http://www.debian.org/security/2016/dsa-3597","http://www.openwall.com/lists/oss-security/2016/06/04/4","http://www.openwall.com/lists/oss-security/2016/06/04/5","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","http://www.securityfocus.com/bid/91159","http://www.ubuntu.com/usn/USN-3010-1","https://kc.mcafee.com/corporate/index?page=content&id=SB10365","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201701-21","https://source.android.com/security/bulletin/2016-11-01.html","https://www.tenable.com/security/tns-2016-20"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-5300","description":"The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted identifiers in an XML document.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0876."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-48565","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-48565","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-48565","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48565","date":"2026-10-08","epss":0.05065,"percentile":0.92102}],"risk":3.2416,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-48565","description":"A flaw was found in Python caused by improper handling of XML external entity (XXE) declarations by the plistlib module. By using a specially crafted XML content, an attacker could obtain sensitive information by disclosing files specified by parsing URI, and may cause denial of service by resource exhaustion."},"relatedVulnerabilities":[{"id":"CVE-2022-48565","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-48565","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48565","date":"2026-10-08","epss":0.05065,"percentile":0.92102}],"urls":["https://bugs.python.org/issue42051","https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFHYAGWBFBNUGWU6XWKBHTCV5NH77MB7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BAYWJD576JUKLHCWKDLMJSUGTRDKPF3M/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZRZRJHWLZ7MOJNPQBWGJVXMVYDC5BRA/","https://security.netapp.com/advisory/ntap-20231006-0007/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-48565","description":"An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-48565","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-48565","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-48565","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48565","date":"2026-10-08","epss":0.05065,"percentile":0.92102}],"risk":3.2416,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-48565","description":"A flaw was found in Python caused by improper handling of XML external entity (XXE) declarations by the plistlib module. By using a specially crafted XML content, an attacker could obtain sensitive information by disclosing files specified by parsing URI, and may cause denial of service by resource exhaustion."},"relatedVulnerabilities":[{"id":"CVE-2022-48565","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-48565","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-48565","date":"2026-10-08","epss":0.05065,"percentile":0.92102}],"urls":["https://bugs.python.org/issue42051","https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFHYAGWBFBNUGWU6XWKBHTCV5NH77MB7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BAYWJD576JUKLHCWKDLMJSUGTRDKPF3M/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZRZRJHWLZ7MOJNPQBWGJVXMVYDC5BRA/","https://security.netapp.com/advisory/ntap-20231006-0007/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-48565","description":"An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities."}]},{"artifact":{"id":"a37bd45d74f5547a","cpes":["cpe:2.3:a:libssh2:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:rpm/centos/libssh2@1.4.3-10.el7_2.1?arch=x86_64&distro=centos-7&upstream=libssh2-1.4.3-10.el7_2.1.src.rpm","type":"rpm","version":"1.4.3-10.el7_2.1","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.8.0-3.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-3858","versionConstraint":"< 0:1.8.0-3.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libssh2","version":"0:1.4.3-10.el7_2.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-3858","fix":{"state":"fixed","versions":["0:1.8.0-3.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:1.8.0-3.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3858","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3858","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3858","date":"2026-10-08","epss":0.06448,"percentile":0.93553}],"risk":3.2239999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2136","link":"https://access.redhat.com/errata/RHSA-2019:2136"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-3858","description":"An out of bounds read flaw was discovered in libssh2 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a denial of service or read data in the client memory."},"relatedVulnerabilities":[{"id":"CVE-2019-3858","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3858","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3858","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3858","date":"2026-10-08","epss":0.06448,"percentile":0.93553}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html","http://www.openwall.com/lists/oss-security/2019/03/18/3","http://www.securityfocus.com/bid/107485","https://access.redhat.com/errata/RHSA-2019:2136","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3858","https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/","https://seclists.org/bugtraq/2019/Apr/25","https://seclists.org/bugtraq/2019/Mar/25","https://security.netapp.com/advisory/ntap-20190327-0005/","https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767","https://www.debian.org/security/2019/dsa-4431","https://www.libssh2.org/CVE-2019-3858.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-3858","description":"An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-8624","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-8624","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8624","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8624","cwe":"CWE-20","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8624","date":"2026-10-08","epss":0.06253,"percentile":0.93385}],"risk":3.220295,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-8624","description":"curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and could instead be tricked into connecting to a different host. This may have security implications if you for example use an URL parser that follows the RFC to check for allowed domains before using curl to request them."},"relatedVulnerabilities":[{"id":"CVE-2016-8624","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8624","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8624","cwe":"CWE-20","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8624","date":"2026-10-08","epss":0.06253,"percentile":0.93385}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/94103","http://www.securitytracker.com/id/1037192","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8624","https://curl.haxx.se/docs/adv_20161102J.html","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rfaa4d578587f52a9c4d176af516a681a712c664e3be440a4163691d5%40%3Ccommits.pulsar.apache.org%3E","https://security.gentoo.org/glsa/201701-47","https://www.tenable.com/security/tns-2016-21"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-8624","description":"curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and could instead be tricked into connecting to a different host. This may have security implications if you for example use an URL parser that follows the RFC to check for allowed domains before using curl to request them."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-8624","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-8624","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8624","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8624","cwe":"CWE-20","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8624","date":"2026-10-08","epss":0.06253,"percentile":0.93385}],"risk":3.220295,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-8624","description":"curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and could instead be tricked into connecting to a different host. This may have security implications if you for example use an URL parser that follows the RFC to check for allowed domains before using curl to request them."},"relatedVulnerabilities":[{"id":"CVE-2016-8624","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8624","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8624","cwe":"CWE-20","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8624","date":"2026-10-08","epss":0.06253,"percentile":0.93385}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/94103","http://www.securitytracker.com/id/1037192","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8624","https://curl.haxx.se/docs/adv_20161102J.html","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rfaa4d578587f52a9c4d176af516a681a712c664e3be440a4163691d5%40%3Ccommits.pulsar.apache.org%3E","https://security.gentoo.org/glsa/201701-47","https://www.tenable.com/security/tns-2016-21"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-8624","description":"curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and could instead be tricked into connecting to a different host. This may have security implications if you for example use an URL parser that follows the RFC to check for allowed domains before using curl to request them."}]},{"artifact":{"id":"2439f8bce118b50f","cpes":["cpe:2.3:a:centos:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*"],"name":"sqlite","purl":"pkg:rpm/centos/sqlite@3.7.17-8.el7?arch=x86_64&distro=centos-7&upstream=sqlite-3.7.17-8.el7.src.rpm","type":"rpm","version":"3.7.17-8.el7","language":"","licenses":["Public Domain"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.7.17-8.el7_7.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-13734","versionConstraint":"< 0:3.7.17-8.el7_7.1 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"sqlite","version":"0:3.7.17-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-13734","fix":{"state":"fixed","versions":["0:3.7.17-8.el7_7.1"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:3.7.17-8.el7_7.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-13734","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-13734","date":"2026-10-08","epss":0.03948,"percentile":0.90138}],"risk":3.21762,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:0227","link":"https://access.redhat.com/errata/RHSA-2020:0227"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-13734","description":"Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."},"relatedVulnerabilities":[{"id":"CVE-2019-13734","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-13734","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-13734","date":"2026-10-08","epss":0.03948,"percentile":0.90138}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00032.html","http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00036.html","https://access.redhat.com/errata/RHSA-2019:4238","https://access.redhat.com/errata/RHSA-2020:0227","https://access.redhat.com/errata/RHSA-2020:0229","https://access.redhat.com/errata/RHSA-2020:0273","https://access.redhat.com/errata/RHSA-2020:0451","https://access.redhat.com/errata/RHSA-2020:0463","https://access.redhat.com/errata/RHSA-2020:0476","https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html","https://crbug.com/1025466","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2Z5M4FPUMDNX2LDPHJKN5ZV5GIS2AKNU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/","https://seclists.org/bugtraq/2020/Jan/27","https://security.gentoo.org/glsa/202003-08","https://usn.ubuntu.com/4298-1/","https://usn.ubuntu.com/4298-2/","https://www.debian.org/security/2020/dsa-4606","https://www.oracle.com/security-alerts/cpujan2022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-13734","description":"Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-26.P2.el7_9.2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-8622","versionConstraint":"< 32:9.11.4-26.P2.el7_9.2 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-8622","fix":{"state":"fixed","versions":["32:9.11.4-26.P2.el7_9.2"],"available":[{"date":"2020-11-11","kind":"first-observed","version":"32:9.11.4-26.P2.el7_9.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8622","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8622","date":"2026-10-08","epss":0.05591,"percentile":0.92697}],"risk":3.214825,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:5011","link":"https://access.redhat.com/errata/RHSA-2020:5011"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-8622","description":"A flaw was found in bind. An assertion failure can occur when trying to verify a truncated response to a TSIG-signed request. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-8622","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8622","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8622","date":"2026-10-08","epss":0.05591,"percentile":0.92697}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html","http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html","https://kb.isc.org/docs/cve-2020-8622","https://lists.debian.org/debian-lts-announce/2020/08/msg00053.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQN62GBMCIC5AY4KYADGXNKVY6AJKSJE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKAMJZXR66P6S5LEU4SN7USSNCWTXEXP/","https://security.gentoo.org/glsa/202008-19","https://security.netapp.com/advisory/ntap-20200827-0003/","https://usn.ubuntu.com/4468-1/","https://usn.ubuntu.com/4468-2/","https://www.debian.org/security/2020/dsa-4752","https://www.oracle.com/security-alerts/cpuoct2021.html","https://www.synology.com/security/advisory/Synology_SA_20_19"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-8622","description":"In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send a truncated response to that request, triggering an assertion failure, causing the server to exit. Alternately, an off-path attacker would have to correctly guess when a TSIG-signed request was sent, along with other characteristics of the packet and message, and spoof a truncated response to trigger an assertion failure, causing the server to exit."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-8391","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8391","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-8391","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8391","date":"2026-10-08","epss":0.06404,"percentile":0.93503}],"risk":3.202,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8391","description":"The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."},"relatedVulnerabilities":[{"id":"CVE-2015-8391","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:C","metrics":{"baseScore":9,"impactScore":8.6,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8391","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8391","date":"2026-10-08","epss":0.06404,"percentile":0.93503}],"urls":["http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html","http://rhn.redhat.com/errata/RHSA-2016-1025.html","http://rhn.redhat.com/errata/RHSA-2016-2750.html","http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup","http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886","http://www.openwall.com/lists/oss-security/2015/11/29/1","http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","http://www.securityfocus.com/bid/82990","https://access.redhat.com/errata/RHSA-2016:1132","https://bto.bluecoat.com/security-advisory/sa128","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731","https://security.gentoo.org/glsa/201607-02","https://security.netapp.com/advisory/ntap-20230216-0002/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8391","description":"The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-88.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-16056","versionConstraint":"< 0:2.7.5-88.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-16056","fix":{"state":"fixed","versions":["0:2.7.5-88.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-88.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-16056","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-16056","date":"2026-10-08","epss":0.0512,"percentile":0.9217}],"risk":3.1488,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1131","link":"https://access.redhat.com/errata/RHSA-2020:1131"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-16056","description":"An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally."},"relatedVulnerabilities":[{"id":"CVE-2019-16056","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-16056","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-16056","date":"2026-10-08","epss":0.0512,"percentile":0.9217}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00021.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","https://access.redhat.com/errata/RHSA-2019:3725","https://access.redhat.com/errata/RHSA-2019:3948","https://bugs.python.org/issue34155","https://github.com/python/cpython/commit/8cb65d1381b027f0b09ee36bfed7f35bb4dec9a9","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/09/msg00018.html","https://lists.debian.org/debian-lts-announce/2019/09/msg00019.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEARDOTXCYPYELKBD2KWZ27GSPXDI3GQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4KZEFP6E4YPYB52AF4WXCUDSGQOTF37/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NF3DRDGMVIRYNZMSLJIHNW47HOUQYXVG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OYGESQSGIHDCIGOBVF7VXCMIE6YDWRYB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QASRD4E2G65GGEHYKVHYCXB2XWAGTNL4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QP46PQSUKYPGWTADQ67NOV3BUN6JM34Z/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SDQQ56P7ZZR64XV5DUVWNSNXKKEXUG2J/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/","https://security.netapp.com/advisory/ntap-20190926-0005/","https://usn.ubuntu.com/4151-1/","https://usn.ubuntu.com/4151-2/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujul2020.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-16056","description":"An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-88.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-16056","versionConstraint":"< 0:2.7.5-88.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-16056","fix":{"state":"fixed","versions":["0:2.7.5-88.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-88.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-16056","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-16056","date":"2026-10-08","epss":0.0512,"percentile":0.9217}],"risk":3.1488,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1131","link":"https://access.redhat.com/errata/RHSA-2020:1131"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-16056","description":"An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally."},"relatedVulnerabilities":[{"id":"CVE-2019-16056","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-16056","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-16056","date":"2026-10-08","epss":0.0512,"percentile":0.9217}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00021.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","https://access.redhat.com/errata/RHSA-2019:3725","https://access.redhat.com/errata/RHSA-2019:3948","https://bugs.python.org/issue34155","https://github.com/python/cpython/commit/8cb65d1381b027f0b09ee36bfed7f35bb4dec9a9","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/09/msg00018.html","https://lists.debian.org/debian-lts-announce/2019/09/msg00019.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEARDOTXCYPYELKBD2KWZ27GSPXDI3GQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4KZEFP6E4YPYB52AF4WXCUDSGQOTF37/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NF3DRDGMVIRYNZMSLJIHNW47HOUQYXVG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OYGESQSGIHDCIGOBVF7VXCMIE6YDWRYB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QASRD4E2G65GGEHYKVHYCXB2XWAGTNL4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QP46PQSUKYPGWTADQ67NOV3BUN6JM34Z/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SDQQ56P7ZZR64XV5DUVWNSNXKKEXUG2J/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/","https://security.netapp.com/advisory/ntap-20190926-0005/","https://usn.ubuntu.com/4151-1/","https://usn.ubuntu.com/4151-2/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujul2020.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-16056","description":"An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally."}]},{"artifact":{"id":"74815ef1ea59fa2c","cpes":["cpe:2.3:a:centos:pcre:8.32-17.el7:*:*:*:*:*:*:*","cpe:2.3:a:pcre:pcre:8.32-17.el7:*:*:*:*:*:*:*"],"name":"pcre","purl":"pkg:rpm/centos/pcre@8.32-17.el7?arch=x86_64&distro=centos-7&upstream=pcre-8.32-17.el7.src.rpm","type":"rpm","version":"8.32-17.el7","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-7186","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"pcre","version":"0:8.32-17.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-7186","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-7186","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-7186","date":"2026-10-08","epss":0.05033,"percentile":0.92053}],"risk":3.145625,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-7186","description":"libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup."},"relatedVulnerabilities":[{"id":"CVE-2017-7186","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-7186","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-7186","date":"2026-10-08","epss":0.05033,"percentile":0.92053}],"urls":["http://www.securityfocus.com/bid/97030","https://access.redhat.com/errata/RHSA-2018:2486","https://blogs.gentoo.org/ago/2017/03/14/libpcre-invalid-memory-read-in-match-pcre_exec-c/","https://bugs.exim.org/show_bug.cgi?id=2052","https://security.gentoo.org/glsa/201710-09","https://security.gentoo.org/glsa/201710-25","https://vcs.pcre.org/pcre/code/trunk/pcre_internal.h?r1=1649&r2=1688&sortby=date","https://vcs.pcre.org/pcre/code/trunk/pcre_ucd.c?r1=1490&r2=1688&sortby=date","https://vcs.pcre.org/pcre2/code/trunk/src/pcre2_internal.h?r1=600&r2=670&sortby=date","https://vcs.pcre.org/pcre2/code/trunk/src/pcre2_ucd.c?r1=316&r2=670&sortby=date"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-7186","description":"libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode property lookup."}]},{"artifact":{"id":"a37bd45d74f5547a","cpes":["cpe:2.3:a:libssh2:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:rpm/centos/libssh2@1.4.3-10.el7_2.1?arch=x86_64&distro=centos-7&upstream=libssh2-1.4.3-10.el7_2.1.src.rpm","type":"rpm","version":"1.4.3-10.el7_2.1","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-3859","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libssh2","version":"0:1.4.3-10.el7_2.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-3859","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3859","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3859","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2019-3859","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-3859","date":"2026-10-08","epss":0.06275,"percentile":0.93405}],"risk":3.1375,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-3859","description":"An out of bounds read flaw was discovered in libssh2 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a denial of service or read data in the client memory."},"relatedVulnerabilities":[{"id":"CVE-2019-3859","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3859","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3859","cwe":"CWE-125","type":"Secondary","source":"nvd@nist.gov"},{"cve":"CVE-2019-3859","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-3859","date":"2026-10-08","epss":0.06275,"percentile":0.93405}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00102.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00103.html","http://packetstormsecurity.com/files/152136/Slackware-Security-Advisory-libssh2-Updates.html","http://www.openwall.com/lists/oss-security/2019/03/18/3","http://www.securityfocus.com/bid/107485","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3859","https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","https://lists.debian.org/debian-lts-announce/2019/04/msg00006.html","https://lists.debian.org/debian-lts-announce/2019/07/msg00024.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCWEA5ZCLKRDUK62QVVYMFWLWKOPX3LO/","https://seclists.org/bugtraq/2019/Apr/25","https://seclists.org/bugtraq/2019/Mar/25","https://security.netapp.com/advisory/ntap-20190327-0005/","https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-767","https://www.debian.org/security/2019/dsa-4431","https://www.libssh2.org/CVE-2019-3859.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-3859","description":"An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory."}]},{"artifact":{"id":"105c3f3269638a7a","cpes":["cpe:2.3:a:krb5-libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5-libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*"],"name":"krb5-libs","purl":"pkg:rpm/centos/krb5-libs@1.15.1-8.el7?arch=x86_64&distro=centos-7&upstream=krb5-1.15.1-8.el7.src.rpm","type":"rpm","version":"1.15.1-8.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"krb5","version":"1.15.1-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2015-2695","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"krb5","version":"1.15.1-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-2695","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-2695","cwe":"CWE-763","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-2695","date":"2026-10-08","epss":0.06243,"percentile":0.93376}],"risk":3.1215,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-2695","description":"A resource-access flaw was discovered in krb5; the SPNEGO mechanism operates under an incorrect assumption when dealing with its context handles. If an application calls gss_inquire_context() on a partially-established SPNEGO context, an unauthenticated, remote attacker could possibly exploit this flaw by sending a specially crafted SPNEGO packet and crashing the system."},"relatedVulnerabilities":[{"id":"CVE-2015-2695","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-2695","cwe":"CWE-763","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-2695","date":"2026-10-08","epss":0.06243,"percentile":0.93376}],"urls":["http://krbdev.mit.edu/rt/Ticket/Display.html?id=8244","http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html","http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00007.html","http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html","http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html","http://www.debian.org/security/2015/dsa-3395","http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","http://www.securityfocus.com/bid/90687","http://www.securitytracker.com/id/1034084","http://www.ubuntu.com/usn/USN-2810-1","https://github.com/krb5/krb5/commit/b51b33f2bc5d1497ddf5bd107f791c101695000d","https://security.gentoo.org/glsa/201611-14"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-2695","description":"lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted SPNEGO packet that is mishandled during a gss_inquire_context call."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-86.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-9740","versionConstraint":"< 0:2.7.5-86.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-9740","fix":{"state":"fixed","versions":["0:2.7.5-86.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-86.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9740","cwe":"CWE-93","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-9740","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9740","date":"2026-10-08","epss":0.05408,"percentile":0.92485}],"risk":3.1096,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2030","link":"https://access.redhat.com/errata/RHSA-2019:2030"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-9740","description":"An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9."},"relatedVulnerabilities":[{"id":"CVE-2019-9740","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9740","cwe":"CWE-93","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-9740","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9740","date":"2026-10-08","epss":0.05408,"percentile":0.92485}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00041.html","http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html","http://www.openwall.com/lists/oss-security/2021/02/04/2","http://www.securityfocus.com/bid/107466","https://access.redhat.com/errata/RHSA-2019:1260","https://access.redhat.com/errata/RHSA-2019:2030","https://access.redhat.com/errata/RHSA-2019:3335","https://access.redhat.com/errata/RHSA-2019:3520","https://access.redhat.com/errata/RHSA-2019:3725","https://bugs.python.org/issue36276","https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html","https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html","https://lists.debian.org/debian-lts-announce/2019/06/msg00026.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/","https://seclists.org/bugtraq/2019/Oct/29","https://security.gentoo.org/glsa/202003-26","https://security.netapp.com/advisory/ntap-20190619-0005/","https://usn.ubuntu.com/4127-1/","https://usn.ubuntu.com/4127-2/","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-9740","description":"An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-86.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-9740","versionConstraint":"< 0:2.7.5-86.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-9740","fix":{"state":"fixed","versions":["0:2.7.5-86.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-86.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9740","cwe":"CWE-93","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-9740","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9740","date":"2026-10-08","epss":0.05408,"percentile":0.92485}],"risk":3.1096,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2030","link":"https://access.redhat.com/errata/RHSA-2019:2030"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-9740","description":"An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9."},"relatedVulnerabilities":[{"id":"CVE-2019-9740","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9740","cwe":"CWE-93","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-9740","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9740","date":"2026-10-08","epss":0.05408,"percentile":0.92485}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00041.html","http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html","http://www.openwall.com/lists/oss-security/2021/02/04/2","http://www.securityfocus.com/bid/107466","https://access.redhat.com/errata/RHSA-2019:1260","https://access.redhat.com/errata/RHSA-2019:2030","https://access.redhat.com/errata/RHSA-2019:3335","https://access.redhat.com/errata/RHSA-2019:3520","https://access.redhat.com/errata/RHSA-2019:3725","https://bugs.python.org/issue36276","https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html","https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html","https://lists.debian.org/debian-lts-announce/2019/06/msg00026.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/","https://seclists.org/bugtraq/2019/Oct/29","https://security.gentoo.org/glsa/202003-26","https://security.netapp.com/advisory/ntap-20190619-0005/","https://usn.ubuntu.com/4127-1/","https://usn.ubuntu.com/4127-2/","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-9740","description":"An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-13565","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-13565","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-13565","date":"2026-10-08","epss":0.05015,"percentile":0.92033}],"risk":3.1092999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-13565","description":"An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending on the ACL configuration, this can affect different types of operations (searches, modifications, etc.). In other words, a successful authorization step completed by one user affects the authorization requirement for a different user."},"relatedVulnerabilities":[{"id":"CVE-2019-13565","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-13565","date":"2026-10-08","epss":0.05015,"percentile":0.92033}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html","http://seclists.org/fulldisclosure/2019/Dec/26","https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/08/msg00024.html","https://seclists.org/bugtraq/2019/Dec/23","https://support.apple.com/kb/HT210788","https://support.f5.com/csp/article/K98008862?utm_source=f5support&amp%3Butm_medium=RSS","https://usn.ubuntu.com/4078-1/","https://usn.ubuntu.com/4078-2/","https://www.openldap.org/its/index.cgi/?findid=9052","https://www.openldap.org/lists/openldap-announce/201907/msg00001.html","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-13565","description":"An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending on the ACL configuration, this can affect different types of operations (searches, modifications, etc.). In other words, a successful authorization step completed by one user affects the authorization requirement for a different user."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-3217","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-3217","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-3217","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-3217","date":"2026-10-08","epss":0.06169,"percentile":0.93305}],"risk":3.0845000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-3217","description":"PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\\\.|([^\\\\\\\\W_])?)+)+$/."},"relatedVulnerabilities":[{"id":"CVE-2015-3217","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-3217","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-3217","date":"2026-10-08","epss":0.06169,"percentile":0.93305}],"urls":["http://rhn.redhat.com/errata/RHSA-2016-1025.html","http://rhn.redhat.com/errata/RHSA-2016-2750.html","http://vcs.pcre.org/pcre?view=revision&revision=1566","http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886","http://www.openwall.com/lists/oss-security/2015/06/03/7","http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","http://www.securityfocus.com/bid/75018","https://access.redhat.com/errata/RHSA-2016:1132","https://bugs.exim.org/show_bug.cgi?id=1638","https://bugzilla.redhat.com/show_bug.cgi?id=1228283"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-3217","description":"PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow remote attackers to cause a denial of service (stack-based buffer overflow) via a crafted regular expression, as demonstrated by /^(?:(?(1)\\\\.|([^\\\\\\\\W_])?)+)+$/."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-4483","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-4483","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-4483","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4483","date":"2026-10-08","epss":0.06165,"percentile":0.93303}],"risk":3.0825,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-4483","description":"The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization.  NOTE: this vulnerability may be a duplicate of CVE-2016-3627."},"relatedVulnerabilities":[{"id":"CVE-2016-4483","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-4483","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4483","date":"2026-10-08","epss":0.06165,"percentile":0.93303}],"urls":["http://rhn.redhat.com/errata/RHSA-2016-2957.html","http://www.debian.org/security/2016/dsa-3593","http://www.openwall.com/lists/oss-security/2016/05/03/8","http://www.openwall.com/lists/oss-security/2016/05/04/7","http://www.openwall.com/lists/oss-security/2016/06/07/4","http://www.openwall.com/lists/oss-security/2016/06/07/5","http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","http://www.securityfocus.com/bid/90013","http://www.securitytracker.com/id/1036348","https://git.gnome.org/browse/libxml2/commit/?id=c97750d11bb8b6f3303e7131fe526a61ac65bcfd","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201701-37","https://www.tenable.com/security/tns-2016-18"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-4483","description":"The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization.  NOTE: this vulnerability may be a duplicate of CVE-2016-3627."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-4483","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-4483","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-4483","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4483","date":"2026-10-08","epss":0.06165,"percentile":0.93303}],"risk":3.0825,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-4483","description":"The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization.  NOTE: this vulnerability may be a duplicate of CVE-2016-3627."},"relatedVulnerabilities":[{"id":"CVE-2016-4483","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-4483","cwe":"CWE-502","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4483","date":"2026-10-08","epss":0.06165,"percentile":0.93303}],"urls":["http://rhn.redhat.com/errata/RHSA-2016-2957.html","http://www.debian.org/security/2016/dsa-3593","http://www.openwall.com/lists/oss-security/2016/05/03/8","http://www.openwall.com/lists/oss-security/2016/05/04/7","http://www.openwall.com/lists/oss-security/2016/06/07/4","http://www.openwall.com/lists/oss-security/2016/06/07/5","http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html","http://www.securityfocus.com/bid/90013","http://www.securitytracker.com/id/1036348","https://git.gnome.org/browse/libxml2/commit/?id=c97750d11bb8b6f3303e7131fe526a61ac65bcfd","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201701-37","https://www.tenable.com/security/tns-2016-18"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-4483","description":"The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute value, related to serialization.  NOTE: this vulnerability may be a duplicate of CVE-2016-3627."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-51.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1000301","versionConstraint":"< 0:7.29.0-51.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000301","fix":{"state":"fixed","versions":["0:7.29.0-51.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-51.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000301","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-1000301","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-1000301","date":"2026-10-08","epss":0.0592,"percentile":0.9306}],"risk":3.0784000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000301","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0."},"relatedVulnerabilities":[{"id":"CVE-2018-1000301","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000301","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-1000301","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-1000301","date":"2026-10-08","epss":0.0592,"percentile":0.9306}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/104225","http://www.securitytracker.com/id/1040931","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-b138.html","https://lists.debian.org/debian-lts-announce/2018/05/msg00010.html","https://security.gentoo.org/glsa/201806-05","https://usn.ubuntu.com/3598-2/","https://usn.ubuntu.com/3648-1/","https://www.debian.org/security/2018/dsa-4202","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000301","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-51.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-1000301","versionConstraint":"< 0:7.29.0-51.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000301","fix":{"state":"fixed","versions":["0:7.29.0-51.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-51.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000301","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-1000301","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-1000301","date":"2026-10-08","epss":0.0592,"percentile":0.9306}],"risk":3.0784000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000301","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0."},"relatedVulnerabilities":[{"id":"CVE-2018-1000301","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000301","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-1000301","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-1000301","date":"2026-10-08","epss":0.0592,"percentile":0.9306}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/104225","http://www.securitytracker.com/id/1040931","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-b138.html","https://lists.debian.org/debian-lts-announce/2018/05/msg00010.html","https://security.gentoo.org/glsa/201806-05","https://usn.ubuntu.com/3598-2/","https://usn.ubuntu.com/3648-1/","https://www.debian.org/security/2018/dsa-4202","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000301","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0."}]},{"artifact":{"id":"5253e5996daa37c8","cpes":["cpe:2.3:a:nss-pem:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss-pem:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_pem:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_pem:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-pem:1.0.3-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_pem:1.0.3-4.el7:*:*:*:*:*:*:*"],"name":"nss-pem","purl":"pkg:rpm/centos/nss-pem@1.0.3-4.el7?arch=x86_64&distro=centos-7&upstream=nss-pem-1.0.3-4.el7.src.rpm","type":"rpm","version":"1.0.3-4.el7","language":"","licenses":["MPLv1.1"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.0.3-5.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1000301","versionConstraint":"< 0:1.0.3-5.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-pem","version":"0:1.0.3-4.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1000301","fix":{"state":"fixed","versions":["0:1.0.3-5.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:1.0.3-5.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000301","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-1000301","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-1000301","date":"2026-10-08","epss":0.0592,"percentile":0.9306}],"risk":3.0784000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3157","link":"https://access.redhat.com/errata/RHSA-2018:3157"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1000301","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0."},"relatedVulnerabilities":[{"id":"CVE-2018-1000301","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1000301","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-1000301","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-1000301","date":"2026-10-08","epss":0.0592,"percentile":0.9306}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/104225","http://www.securitytracker.com/id/1040931","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3157","https://access.redhat.com/errata/RHSA-2018:3558","https://access.redhat.com/errata/RHSA-2020:0544","https://access.redhat.com/errata/RHSA-2020:0594","https://curl.haxx.se/docs/adv_2018-b138.html","https://lists.debian.org/debian-lts-announce/2018/05/msg00010.html","https://security.gentoo.org/glsa/201806-05","https://usn.ubuntu.com/3598-2/","https://usn.ubuntu.com/3648-1/","https://www.debian.org/security/2018/dsa-4202","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000301","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0."}]},{"artifact":{"id":"6dad1d8fb1ecf41d","cpes":["cpe:2.3:a:procps-ng:procps-ng:3.3.10-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:procps-ng:procps_ng:3.3.10-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:procps_ng:procps-ng:3.3.10-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:procps_ng:procps_ng:3.3.10-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:procps-ng:3.3.10-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:procps_ng:3.3.10-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:procps:procps-ng:3.3.10-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:procps:procps_ng:3.3.10-16.el7:*:*:*:*:*:*:*"],"name":"procps-ng","purl":"pkg:rpm/centos/procps-ng@3.3.10-16.el7?arch=x86_64&distro=centos-7&upstream=procps-ng-3.3.10-16.el7.src.rpm","type":"rpm","version":"3.3.10-16.el7","language":"","licenses":["GPL+ and GPLv2 and GPLv2+ and GPLv3+ and LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1123","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"procps-ng","version":"0:3.3.10-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1123","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.9,"impactScore":2.6,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1123","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-1123","cwe":"CWE-119","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1123","date":"2026-10-08","epss":0.08902,"percentile":0.95112}],"risk":3.0711899999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1123","description":"Due to incorrect accounting when decoding and escaping Unicode data in procfs, ps is vulnerable to overflowing an mmap()ed region when formatting the process list for display. Since ps maps a guard page at the end of the buffer, impact is limited to a crash."},"relatedVulnerabilities":[{"id":"CVE-2018-1123","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.9,"impactScore":2.6,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1123","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-1123","cwe":"CWE-119","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-1123","date":"2026-10-08","epss":0.08902,"percentile":0.95112}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00058.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00059.html","http://seclists.org/oss-sec/2018/q2/122","http://www.securityfocus.com/bid/104214","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1123","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2018/05/msg00021.html","https://security.gentoo.org/glsa/201805-14","https://usn.ubuntu.com/3658-1/","https://usn.ubuntu.com/3658-3/","https://www.debian.org/security/2018/dsa-4208","https://www.exploit-db.com/exploits/44806/","https://www.qualys.com/2018/05/17/procps-ng-audit-report-advisory.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1123","description":"procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service)."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-42.el7_4.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-1000257","versionConstraint":"< 0:7.29.0-42.el7_4.1 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-1000257","fix":{"state":"fixed","versions":["0:7.29.0-42.el7_4.1"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-42.el7_4.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-1000257","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-1000257","cwe":"CWE-119","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-1000257","date":"2026-10-08","epss":0.06224,"percentile":0.9336}],"risk":3.0497599999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2017:3263","link":"https://access.redhat.com/errata/RHSA-2017:3263"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-1000257","description":"A buffer overrun flaw was found in the IMAP handler of libcurl. By tricking an unsuspecting user into connecting to a malicious IMAP server, an attacker could exploit this flaw to potentially cause information disclosure or crash the application."},"relatedVulnerabilities":[{"id":"CVE-2017-1000257","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-1000257","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-1000257","cwe":"CWE-119","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-1000257","date":"2026-10-08","epss":0.06224,"percentile":0.9336}],"urls":["http://www.debian.org/security/2017/dsa-4007","http://www.securityfocus.com/bid/101519","http://www.securitytracker.com/id/1039644","https://access.redhat.com/errata/RHSA-2017:3263","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://curl.haxx.se/docs/adv_20171023.html","https://security.gentoo.org/glsa/201712-04"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000257","description":"An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl's deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:7.29.0-42.el7_4.1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-1000257","versionConstraint":"< 0:7.29.0-42.el7_4.1 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-1000257","fix":{"state":"fixed","versions":["0:7.29.0-42.el7_4.1"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:7.29.0-42.el7_4.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-1000257","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-1000257","cwe":"CWE-119","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-1000257","date":"2026-10-08","epss":0.06224,"percentile":0.9336}],"risk":3.0497599999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2017:3263","link":"https://access.redhat.com/errata/RHSA-2017:3263"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-1000257","description":"A buffer overrun flaw was found in the IMAP handler of libcurl. By tricking an unsuspecting user into connecting to a malicious IMAP server, an attacker could exploit this flaw to potentially cause information disclosure or crash the application."},"relatedVulnerabilities":[{"id":"CVE-2017-1000257","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-1000257","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-1000257","cwe":"CWE-119","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-1000257","date":"2026-10-08","epss":0.06224,"percentile":0.9336}],"urls":["http://www.debian.org/security/2017/dsa-4007","http://www.securityfocus.com/bid/101519","http://www.securitytracker.com/id/1039644","https://access.redhat.com/errata/RHSA-2017:3263","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://curl.haxx.se/docs/adv_20171023.html","https://security.gentoo.org/glsa/201712-04"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000257","description":"An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl's deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded."}]},{"artifact":{"id":"4e4067da03756568","cpes":["cpe:2.3:a:centos:libgcc:4.8.5-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc:4.8.5-16.el7:*:*:*:*:*:*:*"],"name":"libgcc","purl":"pkg:rpm/centos/libgcc@4.8.5-16.el7?arch=x86_64&distro=centos-7&upstream=gcc-4.8.5-16.el7.src.rpm","type":"rpm","version":"4.8.5-16.el7","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"4.8.5-16.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-16276","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gcc","version":"4.8.5-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-16276","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-16276","cwe":"CWE-444","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-16276","date":"2026-10-08","epss":0.05299,"percentile":0.92375}],"risk":3.046925,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-16276","description":"It was discovered that net/http (through net/textproto) in golang does not correctly interpret HTTP requests where an HTTP header contains spaces before the colon. This could be abused by an attacker to smuggle HTTP requests when a proxy or a firewall is placed behind a server implemented in Go or to filter bypasses depending on the specific network configuration."},"relatedVulnerabilities":[{"id":"CVE-2019-16276","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-16276","cwe":"CWE-444","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-16276","date":"2026-10-08","epss":0.05299,"percentile":0.92375}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00043.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00044.html","https://access.redhat.com/errata/RHSA-2020:0101","https://access.redhat.com/errata/RHSA-2020:0329","https://access.redhat.com/errata/RHSA-2020:0652","https://github.com/golang/go/issues/34540","https://groups.google.com/forum/#%21msg/golang-announce/cszieYyuL9Q/g4Z7pKaqAgAJ","https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html","https://lists.debian.org/debian-lts-announce/2021/03/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LULL72EUUKIY4NWDZVJVN2LIB4MXHS5P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O7GMJ3VXF5RXK2C7CL66KJ6XOOTOL5BJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q5MD2F7ATWSTB45ZJIPJHBAAHVRGRAKG/","https://security.netapp.com/advisory/ntap-20191122-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-16276","description":"Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling."}]},{"artifact":{"id":"4a236f6ff2195b8a","cpes":["cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:4.8.5-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libstdc\\+\\+:4.8.5-16.el7:*:*:*:*:*:*:*"],"name":"libstdc++","purl":"pkg:rpm/centos/libstdc%2B%2B@4.8.5-16.el7?arch=x86_64&distro=centos-7&upstream=gcc-4.8.5-16.el7.src.rpm","type":"rpm","version":"4.8.5-16.el7","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"4.8.5-16.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-16276","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gcc","version":"4.8.5-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-16276","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-16276","cwe":"CWE-444","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-16276","date":"2026-10-08","epss":0.05299,"percentile":0.92375}],"risk":3.046925,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-16276","description":"It was discovered that net/http (through net/textproto) in golang does not correctly interpret HTTP requests where an HTTP header contains spaces before the colon. This could be abused by an attacker to smuggle HTTP requests when a proxy or a firewall is placed behind a server implemented in Go or to filter bypasses depending on the specific network configuration."},"relatedVulnerabilities":[{"id":"CVE-2019-16276","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-16276","cwe":"CWE-444","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-16276","date":"2026-10-08","epss":0.05299,"percentile":0.92375}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00043.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00044.html","https://access.redhat.com/errata/RHSA-2020:0101","https://access.redhat.com/errata/RHSA-2020:0329","https://access.redhat.com/errata/RHSA-2020:0652","https://github.com/golang/go/issues/34540","https://groups.google.com/forum/#%21msg/golang-announce/cszieYyuL9Q/g4Z7pKaqAgAJ","https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html","https://lists.debian.org/debian-lts-announce/2021/03/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LULL72EUUKIY4NWDZVJVN2LIB4MXHS5P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O7GMJ3VXF5RXK2C7CL66KJ6XOOTOL5BJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q5MD2F7ATWSTB45ZJIPJHBAAHVRGRAKG/","https://security.netapp.com/advisory/ntap-20191122-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-16276","description":"Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling."}]},{"artifact":{"id":"4e4067da03756568","cpes":["cpe:2.3:a:centos:libgcc:4.8.5-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc:4.8.5-16.el7:*:*:*:*:*:*:*"],"name":"libgcc","purl":"pkg:rpm/centos/libgcc@4.8.5-16.el7?arch=x86_64&distro=centos-7&upstream=gcc-4.8.5-16.el7.src.rpm","type":"rpm","version":"4.8.5-16.el7","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"4.8.5-16.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-16845","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gcc","version":"4.8.5-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-16845","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-16845","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-16845","date":"2026-10-08","epss":0.04861,"percentile":0.91812}],"risk":3.038125,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-16845","description":"A flaw was found in the Go encoding/binary package. Certain invalid inputs to the ReadUvarint or the ReadVarint causes those functions to read an unlimited number of bytes from the ByteReader argument before returning an error. This flaw possibly leads to processing more input than expected. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-16845","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-16845","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-16845","date":"2026-10-08","epss":0.04861,"percentile":0.91812}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00021.html","http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00028.html","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00029.html","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00030.html","https://groups.google.com/forum/#%21topic/golang-announce/NyPIaucMgXo","https://groups.google.com/forum/#%21topic/golang-announce/_ulYYcIWg3Q","https://lists.debian.org/debian-lts-announce/2020/11/msg00037.html","https://lists.debian.org/debian-lts-announce/2020/11/msg00038.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6RCFJTMKHY5ICGEM5BUFUEDDGSPJ25XU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWRBAH4UZJO3RROQ72SYCUPFCJFA22FO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WV2VWKFTH4EJGZBZALVUJQJOAQB5MDQ4/","https://security.netapp.com/advisory/ntap-20200924-0002/","https://www.debian.org/security/2021/dsa-4848","https://www.oracle.com/security-alerts/cpuApr2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-16845","description":"Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs."}]},{"artifact":{"id":"4a236f6ff2195b8a","cpes":["cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:4.8.5-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libstdc\\+\\+:4.8.5-16.el7:*:*:*:*:*:*:*"],"name":"libstdc++","purl":"pkg:rpm/centos/libstdc%2B%2B@4.8.5-16.el7?arch=x86_64&distro=centos-7&upstream=gcc-4.8.5-16.el7.src.rpm","type":"rpm","version":"4.8.5-16.el7","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"4.8.5-16.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-16845","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gcc","version":"4.8.5-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-16845","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-16845","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-16845","date":"2026-10-08","epss":0.04861,"percentile":0.91812}],"risk":3.038125,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-16845","description":"A flaw was found in the Go encoding/binary package. Certain invalid inputs to the ReadUvarint or the ReadVarint causes those functions to read an unlimited number of bytes from the ByteReader argument before returning an error. This flaw possibly leads to processing more input than expected. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-16845","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-16845","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-16845","date":"2026-10-08","epss":0.04861,"percentile":0.91812}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00021.html","http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00028.html","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00029.html","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00030.html","https://groups.google.com/forum/#%21topic/golang-announce/NyPIaucMgXo","https://groups.google.com/forum/#%21topic/golang-announce/_ulYYcIWg3Q","https://lists.debian.org/debian-lts-announce/2020/11/msg00037.html","https://lists.debian.org/debian-lts-announce/2020/11/msg00038.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6RCFJTMKHY5ICGEM5BUFUEDDGSPJ25XU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWRBAH4UZJO3RROQ72SYCUPFCJFA22FO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TACQFZDPA7AUR6TRZBCX2RGRFSDYLI7O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WV2VWKFTH4EJGZBZALVUJQJOAQB5MDQ4/","https://security.netapp.com/advisory/ntap-20200924-0002/","https://www.debian.org/security/2021/dsa-4848","https://www.oracle.com/security-alerts/cpuApr2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-16845","description":"Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in encoding/binary via invalid inputs."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-86.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-9947","versionConstraint":"< 0:2.7.5-86.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-9947","fix":{"state":"fixed","versions":["0:2.7.5-86.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-86.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9947","cwe":"CWE-93","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-9947","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9947","date":"2026-10-08","epss":0.05253,"percentile":0.92331}],"risk":3.020475,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2030","link":"https://access.redhat.com/errata/RHSA-2019:2030"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-9947","description":"An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the path component of a URL that lacks a ? character) followed by an HTTP header or a Redis command. This is similar to the CVE-2019-9740 query string issue. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9."},"relatedVulnerabilities":[{"id":"CVE-2019-9947","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9947","cwe":"CWE-93","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-9947","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9947","date":"2026-10-08","epss":0.05253,"percentile":0.92331}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://www.openwall.com/lists/oss-security/2021/02/04/2","https://access.redhat.com/errata/RHSA-2019:1260","https://access.redhat.com/errata/RHSA-2019:2030","https://access.redhat.com/errata/RHSA-2019:3335","https://access.redhat.com/errata/RHSA-2019:3520","https://access.redhat.com/errata/RHSA-2019:3725","https://bugs.python.org/issue35906","https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html","https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html","https://lists.debian.org/debian-lts-announce/2019/06/msg00026.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/","https://security.gentoo.org/glsa/202003-26","https://security.netapp.com/advisory/ntap-20190404-0004/","https://usn.ubuntu.com/4127-1/","https://usn.ubuntu.com/4127-2/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-9947","description":"An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the path component of a URL that lacks a ? character) followed by an HTTP header or a Redis command. This is similar to the CVE-2019-9740 query string issue. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-86.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-9947","versionConstraint":"< 0:2.7.5-86.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-9947","fix":{"state":"fixed","versions":["0:2.7.5-86.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-86.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9947","cwe":"CWE-93","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-9947","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9947","date":"2026-10-08","epss":0.05253,"percentile":0.92331}],"risk":3.020475,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2030","link":"https://access.redhat.com/errata/RHSA-2019:2030"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-9947","description":"An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the path component of a URL that lacks a ? character) followed by an HTTP header or a Redis command. This is similar to the CVE-2019-9740 query string issue. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9."},"relatedVulnerabilities":[{"id":"CVE-2019-9947","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9947","cwe":"CWE-93","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-9947","cwe":"CWE-93","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-9947","date":"2026-10-08","epss":0.05253,"percentile":0.92331}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://www.openwall.com/lists/oss-security/2021/02/04/2","https://access.redhat.com/errata/RHSA-2019:1260","https://access.redhat.com/errata/RHSA-2019:2030","https://access.redhat.com/errata/RHSA-2019:3335","https://access.redhat.com/errata/RHSA-2019:3520","https://access.redhat.com/errata/RHSA-2019:3725","https://bugs.python.org/issue35906","https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html","https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html","https://lists.debian.org/debian-lts-announce/2019/06/msg00026.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/","https://security.gentoo.org/glsa/202003-26","https://security.netapp.com/advisory/ntap-20190404-0004/","https://usn.ubuntu.com/4127-1/","https://usn.ubuntu.com/4127-2/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-9947","description":"An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the path component of a URL that lacks a ? character) followed by an HTTP header or a Redis command. This is similar to the CVE-2019-9740 query string issue. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9."}]},{"artifact":{"id":"17fba130d7153c29","cpes":["cpe:2.3:a:libtasn1:libtasn1:4.10-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libtasn1:4.10-1.el7:*:*:*:*:*:*:*"],"name":"libtasn1","purl":"pkg:rpm/centos/libtasn1@4.10-1.el7?arch=x86_64&distro=centos-7&upstream=libtasn1-4.10-1.el7.src.rpm","type":"rpm","version":"4.10-1.el7","language":"","licenses":["GPLv3+ and LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-6891","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libtasn1","version":"0:4.10-1.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-6891","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-6891","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-6891","date":"2026-10-08","epss":0.05585,"percentile":0.92686}],"risk":3.0159000000000002,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-6891","description":"Two errors in the \"asn1_find_node()\" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility."},"relatedVulnerabilities":[{"id":"CVE-2017-6891","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-6891","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-6891","date":"2026-10-08","epss":0.05585,"percentile":0.92686}],"urls":["http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=5520704d075802df25ce4ffccc010ba1641bd484","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00018.html","http://www.debian.org/security/2017/dsa-3861","http://www.securityfocus.com/bid/98641","http://www.securitytracker.com/id/1038619","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://secuniaresearch.flexerasoftware.com/advisories/76125/","https://secuniaresearch.flexerasoftware.com/secunia_research/2017-11/","https://security.gentoo.org/glsa/201710-11"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-6891","description":"Two errors in the \"asn1_find_node()\" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-14.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-22823","versionConstraint":"< 0:2.1.0-14.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-22823","fix":{"state":"fixed","versions":["0:2.1.0-14.el7_9"],"available":[{"date":"2022-03-29","kind":"first-observed","version":"0:2.1.0-14.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-22823","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-22823","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-22823","date":"2026-10-08","epss":0.03404,"percentile":0.88532}],"risk":2.9444600000000003,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:1069","link":"https://access.redhat.com/errata/RHSA-2022:1069"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-22823","description":"expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability, confidentiality and integrity."},"relatedVulnerabilities":[{"id":"CVE-2022-22823","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-22823","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-22823","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-22823","date":"2026-10-08","epss":0.03404,"percentile":0.88532}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/17/3","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://github.com/libexpat/libexpat/pull/539","https://security.gentoo.org/glsa/202209-24","https://www.debian.org/security/2022/dsa-5073","https://www.tenable.com/security/tns-2022-05"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-22823","description":"build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-14.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-22824","versionConstraint":"< 0:2.1.0-14.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-22824","fix":{"state":"fixed","versions":["0:2.1.0-14.el7_9"],"available":[{"date":"2022-03-29","kind":"first-observed","version":"0:2.1.0-14.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-22824","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-22824","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-22824","date":"2026-10-08","epss":0.03404,"percentile":0.88532}],"risk":2.9444600000000003,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:1069","link":"https://access.redhat.com/errata/RHSA-2022:1069"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-22824","description":"expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability, confidentiality and integrity."},"relatedVulnerabilities":[{"id":"CVE-2022-22824","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-22824","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-22824","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-22824","date":"2026-10-08","epss":0.03404,"percentile":0.88532}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/17/3","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://github.com/libexpat/libexpat/pull/539","https://security.gentoo.org/glsa/202209-24","https://www.debian.org/security/2022/dsa-5073","https://www.tenable.com/security/tns-2022-05"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-22824","description":"defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-14.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-45960","versionConstraint":"< 0:2.1.0-14.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-45960","fix":{"state":"fixed","versions":["0:2.1.0-14.el7_9"],"available":[{"date":"2022-03-29","kind":"first-observed","version":"0:2.1.0-14.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-45960","cwe":"CWE-682","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-45960","cwe":"CWE-682","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-45960","date":"2026-10-08","epss":0.04234,"percentile":0.90764}],"risk":2.92146,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:1069","link":"https://access.redhat.com/errata/RHSA-2022:1069"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-45960","description":"expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to buffer overrun. The highest threat from this vulnerability is to availability."},"relatedVulnerabilities":[{"id":"CVE-2021-45960","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","metrics":{"baseScore":9,"impactScore":10.1,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-45960","cwe":"CWE-682","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-45960","cwe":"CWE-682","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-45960","date":"2026-10-08","epss":0.04234,"percentile":0.90764}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/17/3","https://bugzilla.mozilla.org/show_bug.cgi?id=1217609","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://github.com/libexpat/libexpat/issues/531","https://github.com/libexpat/libexpat/pull/534","https://security.gentoo.org/glsa/202209-24","https://security.netapp.com/advisory/ntap-20220121-0004/","https://www.debian.org/security/2022/dsa-5073","https://www.tenable.com/security/tns-2022-05"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-45960","description":"In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory)."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-23218","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-23218","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23218","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23218","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23218","date":"2026-10-08","epss":0.0482,"percentile":0.91745}],"risk":2.892,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-23218","description":"A stack based buffer-overflow vulnerability was found in the deprecated compatibility function svcunix_create() in the sunrpc's svc_unix.c module of the GNU C Library (aka glibc) through 2.34. This vulnerability copies its path argument onto the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) then it will lead to arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2022-23218","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23218","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23218","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23218","date":"2026-10-08","epss":0.0482,"percentile":0.91745}],"urls":["https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","https://security.gentoo.org/glsa/202208-24","https://sourceware.org/bugzilla/show_bug.cgi?id=28768","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-23218","description":"The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-23218","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-23218","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23218","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23218","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23218","date":"2026-10-08","epss":0.0482,"percentile":0.91745}],"risk":2.892,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-23218","description":"A stack based buffer-overflow vulnerability was found in the deprecated compatibility function svcunix_create() in the sunrpc's svc_unix.c module of the GNU C Library (aka glibc) through 2.34. This vulnerability copies its path argument onto the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) then it will lead to arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2022-23218","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23218","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23218","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23218","date":"2026-10-08","epss":0.0482,"percentile":0.91745}],"urls":["https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","https://security.gentoo.org/glsa/202208-24","https://sourceware.org/bugzilla/show_bug.cgi?id=28768","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-23218","description":"The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution."}]},{"artifact":{"id":"74815ef1ea59fa2c","cpes":["cpe:2.3:a:centos:pcre:8.32-17.el7:*:*:*:*:*:*:*","cpe:2.3:a:pcre:pcre:8.32-17.el7:*:*:*:*:*:*:*"],"name":"pcre","purl":"pkg:rpm/centos/pcre@8.32-17.el7?arch=x86_64&distro=centos-7&upstream=pcre-8.32-17.el7.src.rpm","type":"rpm","version":"8.32-17.el7","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-6004","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"pcre","version":"0:8.32-17.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-6004","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-6004","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-6004","date":"2026-10-08","epss":0.04546,"percentile":0.91332}],"risk":2.84125,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-6004","description":"The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted regular expression."},"relatedVulnerabilities":[{"id":"CVE-2017-6004","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-6004","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-6004","date":"2026-10-08","epss":0.04546,"percentile":0.91332}],"urls":["http://www.securityfocus.com/bid/96295","http://www.securitytracker.com/id/1037850","https://access.redhat.com/errata/RHSA-2018:2486","https://bugs.exim.org/show_bug.cgi?id=2035","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201706-11","https://vcs.pcre.org/pcre/code/trunk/pcre_jit_compile.c?r1=1676&r2=1680&view=patch"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-6004","description":"The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g., the PHP 7.1.1 bundled version) allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted regular expression."}]},{"artifact":{"id":"2439f8bce118b50f","cpes":["cpe:2.3:a:centos:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*"],"name":"sqlite","purl":"pkg:rpm/centos/sqlite@3.7.17-8.el7?arch=x86_64&distro=centos-7&upstream=sqlite-3.7.17-8.el7.src.rpm","type":"rpm","version":"3.7.17-8.el7","language":"","licenses":["Public Domain"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-10989","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"sqlite","version":"0:3.7.17-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-10989","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-10989","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-10989","date":"2026-10-08","epss":0.08609,"percentile":0.94969}],"risk":2.8409699999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-10989","description":"The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact."},"relatedVulnerabilities":[{"id":"CVE-2017-10989","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-10989","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-10989","date":"2026-10-08","epss":0.08609,"percentile":0.94969}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00050.html","http://marc.info/?l=sqlite-users&m=149933696214713&w=2","http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","http://www.securityfocus.com/bid/99502","http://www.securitytracker.com/id/1039427","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2405","https://bugs.launchpad.net/ubuntu/+source/sqlite3/+bug/1700937","https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html","https://sqlite.org/src/info/66de6f4a","https://sqlite.org/src/vpatch?from=0db20efe201736b3&to=66de6f4a9504ec26","https://support.apple.com/HT208112","https://support.apple.com/HT208113","https://support.apple.com/HT208115","https://support.apple.com/HT208144","https://usn.ubuntu.com/4019-1/","https://usn.ubuntu.com/4019-2/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-10989","description":"The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-22946","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-22946","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22946","cwe":"CWE-325","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22946","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-22946","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-22946","date":"2026-10-08","epss":0.04539,"percentile":0.91321}],"risk":2.836875,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-22946","description":"A flaw was found in curl. This flaw lies in the --ssl-reqd option or related settings in libcurl. Users specify this flag to upgrade to TLS when communicating with either IMAP, POP3 or a FTP server. An attacker controlling such servers could return a crafted response which could lead to curl client continue its operation without TLS encryption leading to data being transmitted in clear text over the network. The highest threat from this vulnerability is to data confidentiality."},"relatedVulnerabilities":[{"id":"CVE-2021-22946","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22946","cwe":"CWE-325","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22946","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-22946","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-22946","date":"2026-10-08","epss":0.04539,"percentile":0.91321}],"urls":["http://seclists.org/fulldisclosure/2022/Mar/29","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://hackerone.com/reports/1334111","https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html","https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/","https://security.gentoo.org/glsa/202212-01","https://security.netapp.com/advisory/ntap-20211029-0003/","https://security.netapp.com/advisory/ntap-20220121-0008/","https://support.apple.com/kb/HT213183","https://www.debian.org/security/2022/dsa-5197","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-22946","description":"A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-22946","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-22946","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22946","cwe":"CWE-325","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22946","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-22946","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-22946","date":"2026-10-08","epss":0.04539,"percentile":0.91321}],"risk":2.836875,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-22946","description":"A flaw was found in curl. This flaw lies in the --ssl-reqd option or related settings in libcurl. Users specify this flag to upgrade to TLS when communicating with either IMAP, POP3 or a FTP server. An attacker controlling such servers could return a crafted response which could lead to curl client continue its operation without TLS encryption leading to data being transmitted in clear text over the network. The highest threat from this vulnerability is to data confidentiality."},"relatedVulnerabilities":[{"id":"CVE-2021-22946","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22946","cwe":"CWE-325","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22946","cwe":"CWE-319","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-22946","cwe":"CWE-319","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-22946","date":"2026-10-08","epss":0.04539,"percentile":0.91321}],"urls":["http://seclists.org/fulldisclosure/2022/Mar/29","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://hackerone.com/reports/1334111","https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html","https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/","https://security.gentoo.org/glsa/202212-01","https://security.netapp.com/advisory/ntap-20211029-0003/","https://security.netapp.com/advisory/ntap-20220121-0008/","https://support.apple.com/kb/HT213183","https://www.debian.org/security/2022/dsa-5197","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-22946","description":"A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network."}]},{"artifact":{"id":"8a1e48233a68a928","cpes":["cpe:2.3:a:centos:zlib:1.2.7-17.el7:*:*:*:*:*:*:*","cpe:2.3:a:zlib:zlib:1.2.7-17.el7:*:*:*:*:*:*:*"],"name":"zlib","purl":"pkg:rpm/centos/zlib@1.2.7-17.el7?arch=x86_64&distro=centos-7&upstream=zlib-1.2.7-17.el7.src.rpm","type":"rpm","version":"1.2.7-17.el7","language":"","licenses":["zlib and Boost"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-9840","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"zlib","version":"0:1.2.7-17.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-9840","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2016-9840","date":"2026-10-08","epss":0.04793,"percentile":0.91709}],"risk":2.8278700000000003,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-9840","description":"A vulnerability was discovered in the inftrees.c file of zlib. Pointer arithmetic operations violate the C standard by subtracting an offset from an array pointer before its allocated memory, leading to undefined behavior."},"relatedVulnerabilities":[{"id":"CVE-2016-9840","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2016-9840","date":"2026-10-08","epss":0.04793,"percentile":0.91709}],"urls":["http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html","http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html","http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html","http://www.openwall.com/lists/oss-security/2016/12/05/21","http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/95131","http://www.securitytracker.com/id/1039427","https://access.redhat.com/errata/RHSA-2017:1220","https://access.redhat.com/errata/RHSA-2017:1221","https://access.redhat.com/errata/RHSA-2017:1222","https://access.redhat.com/errata/RHSA-2017:2999","https://access.redhat.com/errata/RHSA-2017:3046","https://access.redhat.com/errata/RHSA-2017:3047","https://access.redhat.com/errata/RHSA-2017:3453","https://bugzilla.redhat.com/show_bug.cgi?id=1402345","https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0","https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html","https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html","https://security.gentoo.org/glsa/201701-56","https://security.gentoo.org/glsa/202007-54","https://support.apple.com/HT208112","https://support.apple.com/HT208113","https://support.apple.com/HT208115","https://support.apple.com/HT208144","https://usn.ubuntu.com/4246-1/","https://usn.ubuntu.com/4292-1/","https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib","https://wiki.mozilla.org/images/0/09/Zlib-report.pdf","https://www.oracle.com/security-alerts/cpujul2020.html","https://cert-portal.siemens.com/productcert/html/ssa-470355.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-9840","description":"inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-76.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1061","versionConstraint":"< 0:2.7.5-76.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1061","fix":{"state":"fixed","versions":["0:2.7.5-76.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-76.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1061","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2018-1061","date":"2026-10-08","epss":0.04916,"percentile":0.91892}],"risk":2.8267,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3041","link":"https://access.redhat.com/errata/RHSA-2018:3041"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1061","description":"A flaw was found in the way catastrophic backtracking was implemented in python's difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service."},"relatedVulnerabilities":[{"id":"CVE-2018-1061","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1061","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2018-1061","date":"2026-10-08","epss":0.04916,"percentile":0.91892}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://www.securitytracker.com/id/1042001","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3041","https://access.redhat.com/errata/RHSA-2018:3505","https://access.redhat.com/errata/RHSA-2019:1260","https://access.redhat.com/errata/RHSA-2019:3725","https://bugs.python.org/issue32981","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1061","https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-6-release-candidate-1","https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-release-candidate-1","https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html","https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03951en_us","https://usn.ubuntu.com/3817-1/","https://usn.ubuntu.com/3817-2/","https://www.debian.org/security/2018/dsa-4306","https://www.debian.org/security/2018/dsa-4307"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1061","description":"python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method.  An attacker could use this flaw to cause denial of service."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-76.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-1061","versionConstraint":"< 0:2.7.5-76.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1061","fix":{"state":"fixed","versions":["0:2.7.5-76.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-76.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1061","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2018-1061","date":"2026-10-08","epss":0.04916,"percentile":0.91892}],"risk":2.8267,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3041","link":"https://access.redhat.com/errata/RHSA-2018:3041"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1061","description":"A flaw was found in the way catastrophic backtracking was implemented in python's difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service."},"relatedVulnerabilities":[{"id":"CVE-2018-1061","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1061","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2018-1061","date":"2026-10-08","epss":0.04916,"percentile":0.91892}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://www.securitytracker.com/id/1042001","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3041","https://access.redhat.com/errata/RHSA-2018:3505","https://access.redhat.com/errata/RHSA-2019:1260","https://access.redhat.com/errata/RHSA-2019:3725","https://bugs.python.org/issue32981","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1061","https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-6-release-candidate-1","https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-release-candidate-1","https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html","https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03951en_us","https://usn.ubuntu.com/3817-1/","https://usn.ubuntu.com/3817-2/","https://www.debian.org/security/2018/dsa-4306","https://www.debian.org/security/2018/dsa-4307"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1061","description":"python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method.  An attacker could use this flaw to cause denial of service."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-0215","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-0215","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0215","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-0215","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-0215","date":"2026-10-08","epss":0.04494,"percentile":0.91248}],"risk":2.8087500000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-0215","description":"A use-after-free vulnerability was found in OpenSSL's BIO_new_NDEF function. The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally by OpenSSL to support the SMIME, CMS, and PKCS7 streaming capabilities, but it may also be called directly by end-user applications. The function receives a BIO from the caller, prepends a new BIO_f_asn1 filter BIO onto the front of it to form a BIO chain, and then returns the new head of the BIO chain to the caller. Under certain conditions. For example, if a CMS recipient public key is invalid, the new filter BIO is freed, and the function returns a NULL result indicating a failure. However, in this case, the BIO chain is not properly cleaned up, and the BIO passed by the caller still retains internal pointers to the previously freed filter BIO. If the caller then calls BIO_pop() on the BIO, a use-after-free will occur, possibly resulting in a crash."},"relatedVulnerabilities":[{"id":"CVE-2023-0215","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0215","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-0215","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-0215","date":"2026-10-08","epss":0.04494,"percentile":0.91248}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230427-0007/","https://security.netapp.com/advisory/ntap-20230427-0009/","https://security.netapp.com/advisory/ntap-20240621-0006/","https://www.openssl.org/news/secadv/20230207.txt","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0215","description":"The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-10735","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-10735","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-10735","cwe":"CWE-704","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-10735","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-10735","date":"2026-10-08","epss":0.04486,"percentile":0.91233}],"risk":2.80375,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-10735","description":"A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int(\"text\"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-10735","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-10735","cwe":"CWE-704","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-10735","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-10735","date":"2026-10-08","epss":0.04486,"percentile":0.91233}],"urls":["http://www.openwall.com/lists/oss-security/2022/09/21/1","http://www.openwall.com/lists/oss-security/2022/09/21/4","https://access.redhat.com/security/cve/CVE-2020-10735","https://bugzilla.redhat.com/show_bug.cgi?id=1834423","https://docs.google.com/document/d/1KjuF_aXlzPUxTK4BMgezGJ2Pn7uevfX7g0_mvgHlL7Y","https://github.com/python/cpython/issues/95778","https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2VCU6EVQDIXNCEDJUCTFIER2WVNNDTYZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/32AAQKABEKFCB5DDV5OONRZK6BS23HPW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EWKR2SPX3JORLWCXFY3KN2U5B5CIUQQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XL6E5A3I36TRR73VNBOXNIQP4AMZDFZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/76YE7AM37MRU76XJV4M27CWDAMUGNRYK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSRPVJZL6DJFWKYRHMNJB7VCEUCBKRF5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFGV7P2PYFBMK32OKHCAC2ZPJQV5AUDF/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NHC6IUU7CLRQ3QLPWUXLONSG3SXFTR47/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKYE2DOI2X7WZXAWTQJZAXYIWM37HDCY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OT5U223OE5ZOUHZAZYSYSWVJQIKDE73E/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OT5WQB7Z3CXOWVBD2AFAHYPA5ONYFFZ4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PD7FTLJOIGMUSCDR3JAN6WRFHJEE4PH5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZYJSGLSCQOKXXFVJVJQAXLEOJBIWGEL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TD7JDDKJXK6D26XAN3YRFNM2LAJHT5UO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMWPRAAJS7I6U3U45V7GZVXWNSECI22M/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U4ZZV4CDFRMTPDBI7C5L43RFL3XLIGUY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBPDVCDIUCEBE7C4NAGNA2KQJYOTPBAZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V7ZUJDHK7KNG6SLIFXW7MNZ6O2PUJYK6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXF6MQ74HVIDDSR5AE2UDR24I6D4FEPC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZEOAJWGGY55QU35UM2OVZATBW5MX2OZD/","https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-10735","description":"A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int(\"text\"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-10735","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-10735","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-10735","cwe":"CWE-704","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-10735","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-10735","date":"2026-10-08","epss":0.04486,"percentile":0.91233}],"risk":2.80375,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-10735","description":"A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int(\"text\"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-10735","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-10735","cwe":"CWE-704","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-10735","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-10735","date":"2026-10-08","epss":0.04486,"percentile":0.91233}],"urls":["http://www.openwall.com/lists/oss-security/2022/09/21/1","http://www.openwall.com/lists/oss-security/2022/09/21/4","https://access.redhat.com/security/cve/CVE-2020-10735","https://bugzilla.redhat.com/show_bug.cgi?id=1834423","https://docs.google.com/document/d/1KjuF_aXlzPUxTK4BMgezGJ2Pn7uevfX7g0_mvgHlL7Y","https://github.com/python/cpython/issues/95778","https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2VCU6EVQDIXNCEDJUCTFIER2WVNNDTYZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/32AAQKABEKFCB5DDV5OONRZK6BS23HPW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EWKR2SPX3JORLWCXFY3KN2U5B5CIUQQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XL6E5A3I36TRR73VNBOXNIQP4AMZDFZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/76YE7AM37MRU76XJV4M27CWDAMUGNRYK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSRPVJZL6DJFWKYRHMNJB7VCEUCBKRF5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFGV7P2PYFBMK32OKHCAC2ZPJQV5AUDF/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NHC6IUU7CLRQ3QLPWUXLONSG3SXFTR47/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKYE2DOI2X7WZXAWTQJZAXYIWM37HDCY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OT5U223OE5ZOUHZAZYSYSWVJQIKDE73E/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OT5WQB7Z3CXOWVBD2AFAHYPA5ONYFFZ4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PD7FTLJOIGMUSCDR3JAN6WRFHJEE4PH5/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZYJSGLSCQOKXXFVJVJQAXLEOJBIWGEL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TD7JDDKJXK6D26XAN3YRFNM2LAJHT5UO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMWPRAAJS7I6U3U45V7GZVXWNSECI22M/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U4ZZV4CDFRMTPDBI7C5L43RFL3XLIGUY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBPDVCDIUCEBE7C4NAGNA2KQJYOTPBAZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V7ZUJDHK7KNG6SLIFXW7MNZ6O2PUJYK6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXF6MQ74HVIDDSR5AE2UDR24I6D4FEPC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZEOAJWGGY55QU35UM2OVZATBW5MX2OZD/","https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-10735","description":"A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int(\"text\"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-0755","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-0755","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-0755","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-0755","date":"2026-10-08","epss":0.09327,"percentile":0.95266}],"risk":2.7981000000000003,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-0755","description":"The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015."},"relatedVulnerabilities":[{"id":"CVE-2016-0755","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-0755","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-0755","date":"2026-10-08","epss":0.09327,"percentile":0.95266}],"urls":["http://curl.haxx.se/docs/adv_20160127A.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176546.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177342.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177383.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176413.html","http://lists.opensuse.org/opensuse-updates/2016-02/msg00031.html","http://lists.opensuse.org/opensuse-updates/2016-02/msg00044.html","http://lists.opensuse.org/opensuse-updates/2016-02/msg00047.html","http://packetstormsecurity.com/files/135695/Slackware-Security-Advisory-curl-Updates.html","http://www.debian.org/security/2016/dsa-3455","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/82307","http://www.securitytracker.com/id/1034882","http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.519965","http://www.ubuntu.com/usn/USN-2882-1","https://security.gentoo.org/glsa/201701-47","https://support.apple.com/HT207170"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-0755","description":"The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-0755","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-0755","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-0755","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-0755","date":"2026-10-08","epss":0.09327,"percentile":0.95266}],"risk":2.7981000000000003,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-0755","description":"The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015."},"relatedVulnerabilities":[{"id":"CVE-2016-0755","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-0755","cwe":"CWE-287","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-0755","date":"2026-10-08","epss":0.09327,"percentile":0.95266}],"urls":["http://curl.haxx.se/docs/adv_20160127A.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176546.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177342.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177383.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176413.html","http://lists.opensuse.org/opensuse-updates/2016-02/msg00031.html","http://lists.opensuse.org/opensuse-updates/2016-02/msg00044.html","http://lists.opensuse.org/opensuse-updates/2016-02/msg00047.html","http://packetstormsecurity.com/files/135695/Slackware-Security-Advisory-curl-Updates.html","http://www.debian.org/security/2016/dsa-3455","http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/82307","http://www.securitytracker.com/id/1034882","http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.519965","http://www.ubuntu.com/usn/USN-2882-1","https://security.gentoo.org/glsa/201701-47","https://support.apple.com/HT207170"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-0755","description":"The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015."}]},{"artifact":{"id":"4e4067da03756568","cpes":["cpe:2.3:a:centos:libgcc:4.8.5-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc:4.8.5-16.el7:*:*:*:*:*:*:*"],"name":"libgcc","purl":"pkg:rpm/centos/libgcc@4.8.5-16.el7?arch=x86_64&distro=centos-7&upstream=gcc-4.8.5-16.el7.src.rpm","type":"rpm","version":"4.8.5-16.el7","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"4.8.5-16.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2014-5044","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gcc","version":"4.8.5-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2014-5044","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2014-5044","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-5044","date":"2026-10-08","epss":0.05572,"percentile":0.9267}],"risk":2.786,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2014-5044","description":"Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation."},"relatedVulnerabilities":[{"id":"CVE-2014-5044","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2014-5044","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-5044","date":"2026-10-08","epss":0.05572,"percentile":0.9267}],"urls":["http://www.openwall.com/lists/oss-security/2014/07/24/1","http://www.openwall.com/lists/oss-security/2014/07/31/6","https://bugzilla.redhat.com/show_bug.cgi?id=1122812","https://exchange.xforce.ibmcloud.com/vulnerabilities/94849","https://gcc.gnu.org/viewcvs/gcc/trunk/libgfortran/ChangeLog?limit_changes=0&view=markup&pathrev=211721"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2014-5044","description":"Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation."}]},{"artifact":{"id":"4a236f6ff2195b8a","cpes":["cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:4.8.5-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libstdc\\+\\+:4.8.5-16.el7:*:*:*:*:*:*:*"],"name":"libstdc++","purl":"pkg:rpm/centos/libstdc%2B%2B@4.8.5-16.el7?arch=x86_64&distro=centos-7&upstream=gcc-4.8.5-16.el7.src.rpm","type":"rpm","version":"4.8.5-16.el7","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"4.8.5-16.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2014-5044","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gcc","version":"4.8.5-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2014-5044","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2014-5044","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-5044","date":"2026-10-08","epss":0.05572,"percentile":0.9267}],"risk":2.786,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2014-5044","description":"Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation."},"relatedVulnerabilities":[{"id":"CVE-2014-5044","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2014-5044","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-5044","date":"2026-10-08","epss":0.05572,"percentile":0.9267}],"urls":["http://www.openwall.com/lists/oss-security/2014/07/24/1","http://www.openwall.com/lists/oss-security/2014/07/31/6","https://bugzilla.redhat.com/show_bug.cgi?id=1122812","https://exchange.xforce.ibmcloud.com/vulnerabilities/94849","https://gcc.gnu.org/viewcvs/gcc/trunk/libgfortran/ChangeLog?limit_changes=0&view=markup&pathrev=211721"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2014-5044","description":"Multiple integer overflows in libgfortran might allow remote attackers to execute arbitrary code or cause a denial of service (Fortran application crash) via vectors related to array allocation."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.4.44-22.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-12243","versionConstraint":"< 0:2.4.44-22.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-12243","fix":{"state":"fixed","versions":["0:2.4.44-22.el7"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:2.4.44-22.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-12243","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-12243","date":"2026-10-08","epss":0.04423,"percentile":0.91112}],"risk":2.764375,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:4041","link":"https://access.redhat.com/errata/RHSA-2020:4041"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-12243","description":"In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash)."},"relatedVulnerabilities":[{"id":"CVE-2020-12243","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-12243","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-12243","date":"2026-10-08","epss":0.04423,"percentile":0.91112}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00016.html","https://bugs.openldap.org/show_bug.cgi?id=9202","https://git.openldap.org/openldap/openldap/-/blob/OPENLDAP_REL_ENG_2_4/CHANGES","https://git.openldap.org/openldap/openldap/-/commit/98464c11df8247d6a11b52e294ba5dd4f0380440","https://lists.debian.org/debian-lts-announce/2020/05/msg00001.html","https://security.netapp.com/advisory/ntap-20200511-0003/","https://support.apple.com/kb/HT211289","https://usn.ubuntu.com/4352-1/","https://usn.ubuntu.com/4352-2/","https://www.debian.org/security/2020/dsa-4666","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpuoct2020.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-12243","description":"In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash)."}]},{"artifact":{"id":"105c3f3269638a7a","cpes":["cpe:2.3:a:krb5-libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5-libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*"],"name":"krb5-libs","purl":"pkg:rpm/centos/krb5-libs@1.15.1-8.el7?arch=x86_64&distro=centos-7&upstream=krb5-1.15.1-8.el7.src.rpm","type":"rpm","version":"1.15.1-8.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"krb5","version":"1.15.1-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-28196","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"krb5","version":"1.15.1-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-28196","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-28196","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-28196","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-28196","date":"2026-10-08","epss":0.04417,"percentile":0.91102}],"risk":2.760625,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-28196","description":"A flaw was found in krb5. MIT Kerberos 5 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit."},"relatedVulnerabilities":[{"id":"CVE-2020-28196","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-28196","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-28196","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-28196","date":"2026-10-08","epss":0.04417,"percentile":0.91102}],"urls":["https://github.com/krb5/krb5/commit/57415dda6cf04e73ffc3723be518eddfae599bfd","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/11/msg00011.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45KKOZQWIIIW5C45PJVGQ32AXBSYNBE7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/73IGOG6CZAVMVNS4GGRMOLOZ7B6QVA7F/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPH2V3WSQTELROZK3GFCPQDOFLKIZ6H5/","https://security.gentoo.org/glsa/202011-17","https://security.netapp.com/advisory/ntap-20201202-0001/","https://security.netapp.com/advisory/ntap-20210513-0002/","https://www.debian.org/security/2020/dsa-4795","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-28196","description":"MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.56.1-2.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-2862","versionConstraint":"< 0:2.56.1-2.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-2862","fix":{"state":"fixed","versions":["0:2.56.1-2.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:2.56.1-2.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-2862","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-2862","date":"2026-10-08","epss":0.04599,"percentile":0.9142}],"risk":2.7594,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3140","link":"https://access.redhat.com/errata/RHSA-2018:3140"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-2862","description":"An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability."},"relatedVulnerabilities":[{"id":"CVE-2017-2862","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"talos-cna@cisco.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-2862","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-2862","date":"2026-10-08","epss":0.04599,"percentile":0.9142}],"urls":["http://www.debian.org/security/2017/dsa-3978","http://www.securityfocus.com/bid/100541","https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0366"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-2862","description":"An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability."}]},{"artifact":{"id":"920b5d4d13067767","cpes":["cpe:2.3:a:gobject-introspection:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject-introspection:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject_introspection:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject_introspection:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*"],"name":"gobject-introspection","purl":"pkg:rpm/centos/gobject-introspection@1.50.0-1.el7?arch=x86_64&distro=centos-7&upstream=gobject-introspection-1.50.0-1.el7.src.rpm","type":"rpm","version":"1.50.0-1.el7","language":"","licenses":["GPLv2+, LGPLv2+, MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.56.1-1.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-2862","versionConstraint":"< 0:1.56.1-1.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gobject-introspection","version":"0:1.50.0-1.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-2862","fix":{"state":"fixed","versions":["0:1.56.1-1.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:1.56.1-1.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-2862","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-2862","date":"2026-10-08","epss":0.04599,"percentile":0.9142}],"risk":2.7594,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3140","link":"https://access.redhat.com/errata/RHSA-2018:3140"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-2862","description":"An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability."},"relatedVulnerabilities":[{"id":"CVE-2017-2862","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"talos-cna@cisco.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-2862","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-2862","date":"2026-10-08","epss":0.04599,"percentile":0.9142}],"urls":["http://www.debian.org/security/2017/dsa-3978","http://www.securityfocus.com/bid/100541","https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0366"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-2862","description":"An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-22924","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-22924","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22924","cwe":"CWE-20","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22924","cwe":"CWE-706","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-22924","date":"2026-10-08","epss":0.0627,"percentile":0.93399}],"risk":2.72745,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-22924","description":"A flaw was found in libcurl in the way libcurl handles previously used connections without accounting for 'issuer cert' and comparing the involved paths case-insensitively. This flaw allows libcurl to use the wrong connection. The highest threat from this vulnerability is to confidentiality."},"relatedVulnerabilities":[{"id":"CVE-2021-22924","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22924","cwe":"CWE-20","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22924","cwe":"CWE-706","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-22924","date":"2026-10-08","epss":0.0627,"percentile":0.93399}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf","https://hackerone.com/reports/1223565","https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E","https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html","https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/","https://security.netapp.com/advisory/ntap-20210902-0003/","https://www.debian.org/security/2022/dsa-5197","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-22924","description":"libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or can be, case sensitive on many systems but not all, and caneven vary depending on used file systems.The comparison also didn't include the 'issuer cert' which a transfer can setto qualify how to verify the server certificate."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-22924","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-22924","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22924","cwe":"CWE-20","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22924","cwe":"CWE-706","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-22924","date":"2026-10-08","epss":0.0627,"percentile":0.93399}],"risk":2.72745,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-22924","description":"A flaw was found in libcurl in the way libcurl handles previously used connections without accounting for 'issuer cert' and comparing the involved paths case-insensitively. This flaw allows libcurl to use the wrong connection. The highest threat from this vulnerability is to confidentiality."},"relatedVulnerabilities":[{"id":"CVE-2021-22924","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22924","cwe":"CWE-20","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22924","cwe":"CWE-706","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-22924","date":"2026-10-08","epss":0.0627,"percentile":0.93399}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf","https://hackerone.com/reports/1223565","https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/r61db8e7dcb56dc000a5387a88f7a473bacec5ee01b9ff3f55308aacc%40%3Cusers.kafka.apache.org%3E","https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/rbf4ce74b0d1fa9810dec50ba3ace0caeea677af7c27a97111c06ccb7%40%3Cusers.kafka.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/08/msg00017.html","https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRUCW2UVNYUDZF72DQLFQR4PJEC6CF7V/","https://security.netapp.com/advisory/ntap-20210902-0003/","https://www.debian.org/security/2022/dsa-5197","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-22924","description":"libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or can be, case sensitive on many systems but not all, and caneven vary depending on used file systems.The comparison also didn't include the 'issuer cert' which a transfer can setto qualify how to verify the server certificate."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-9169","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-9169","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9169","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-9169","date":"2026-10-08","epss":0.04731,"percentile":0.91614}],"risk":2.720325,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-9169","description":"In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match."},"relatedVulnerabilities":[{"id":"CVE-2019-9169","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9169","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-9169","date":"2026-10-08","epss":0.04731,"percentile":0.91614}],"urls":["http://www.securityfocus.com/bid/107160","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34140","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34142","https://kc.mcafee.com/corporate/index?page=content&id=SB10278","https://security.gentoo.org/glsa/202006-04","https://security.netapp.com/advisory/ntap-20190315-0002/","https://sourceware.org/bugzilla/show_bug.cgi?id=24114","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=583dd860d5b833037175247230a328f0050dbfe9","https://support.f5.com/csp/article/K54823184","https://usn.ubuntu.com/4416-1/","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-9169","description":"In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-9169","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-9169","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9169","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-9169","date":"2026-10-08","epss":0.04731,"percentile":0.91614}],"risk":2.720325,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-9169","description":"In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match."},"relatedVulnerabilities":[{"id":"CVE-2019-9169","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9169","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-9169","date":"2026-10-08","epss":0.04731,"percentile":0.91614}],"urls":["http://www.securityfocus.com/bid/107160","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34140","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34142","https://kc.mcafee.com/corporate/index?page=content&id=SB10278","https://security.gentoo.org/glsa/202006-04","https://security.netapp.com/advisory/ntap-20190315-0002/","https://sourceware.org/bugzilla/show_bug.cgi?id=24114","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commit%3Bh=583dd860d5b833037175247230a328f0050dbfe9","https://support.f5.com/csp/article/K54823184","https://usn.ubuntu.com/4416-1/","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-9169","description":"In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-3446","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-3446","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3446","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3446","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3446","date":"2026-10-08","epss":0.06531,"percentile":0.93621}],"risk":2.710365000000001,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-3446","description":"A vulnerability was found in OpenSSL. This security flaw occurs because the applications that use the DH_check(), DH_check_ex(), or EVP_PKEY_param_check() functions to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source may lead to a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2023-3446","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3446","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-3446","cwe":"CWE-1333","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-3446","date":"2026-10-08","epss":0.06531,"percentile":0.93621}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23","https://www.openssl.org/news/secadv/20230719.txt","http://www.openwall.com/lists/oss-security/2023/07/19/4","http://www.openwall.com/lists/oss-security/2023/07/19/5","http://www.openwall.com/lists/oss-security/2023/07/19/6","http://www.openwall.com/lists/oss-security/2023/07/31/1","http://www.openwall.com/lists/oss-security/2024/05/16/1","https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20230803-0011/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-3446","description":"Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-16931","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-16931","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16931","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-16931","date":"2026-10-08","epss":0.04332,"percentile":0.90937}],"risk":2.7075,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-16931","description":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name."},"relatedVulnerabilities":[{"id":"CVE-2017-16931","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16931","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-16931","date":"2026-10-08","epss":0.04332,"percentile":0.90937}],"urls":["http://xmlsoft.org/news.html","https://bugzilla.gnome.org/show_bug.cgi?id=766956","https://github.com/GNOME/libxml2/commit/e26630548e7d138d2c560844c43820b6767251e3","https://lists.debian.org/debian-lts-announce/2017/11/msg00041.html","https://www.oracle.com//security-alerts/cpujul2021.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-16931","description":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-16931","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-16931","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16931","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-16931","date":"2026-10-08","epss":0.04332,"percentile":0.90937}],"risk":2.7075,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-16931","description":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name."},"relatedVulnerabilities":[{"id":"CVE-2017-16931","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16931","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-16931","date":"2026-10-08","epss":0.04332,"percentile":0.90937}],"urls":["http://xmlsoft.org/news.html","https://bugzilla.gnome.org/show_bug.cgi?id=766956","https://github.com/GNOME/libxml2/commit/e26630548e7d138d2c560844c43820b6767251e3","https://lists.debian.org/debian-lts-announce/2017/11/msg00041.html","https://www.oracle.com//security-alerts/cpujul2021.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-16931","description":"parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-8387","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8387","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8387","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8387","date":"2026-10-08","epss":0.03641,"percentile":0.89267}],"risk":2.69434,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8387","description":"PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."},"relatedVulnerabilities":[{"id":"CVE-2015-8387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8387","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8387","date":"2026-10-08","epss":0.03641,"percentile":0.89267}],"urls":["http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html","http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup","http://www.openwall.com/lists/oss-security/2015/11/29/1","http://www.securityfocus.com/bid/82990","https://bto.bluecoat.com/security-advisory/sa128","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731","https://security.gentoo.org/glsa/201607-02","https://security.netapp.com/advisory/ntap-20230216-0002/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8387","description":"PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."}]},{"artifact":{"id":"74815ef1ea59fa2c","cpes":["cpe:2.3:a:centos:pcre:8.32-17.el7:*:*:*:*:*:*:*","cpe:2.3:a:pcre:pcre:8.32-17.el7:*:*:*:*:*:*:*"],"name":"pcre","purl":"pkg:rpm/centos/pcre@8.32-17.el7?arch=x86_64&distro=centos-7&upstream=pcre-8.32-17.el7.src.rpm","type":"rpm","version":"8.32-17.el7","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-8387","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"pcre","version":"0:8.32-17.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8387","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8387","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8387","date":"2026-10-08","epss":0.03641,"percentile":0.89267}],"risk":2.69434,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8387","description":"PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."},"relatedVulnerabilities":[{"id":"CVE-2015-8387","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":7.3,"impactScore":3.4,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8387","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8387","date":"2026-10-08","epss":0.03641,"percentile":0.89267}],"urls":["http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html","http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup","http://www.openwall.com/lists/oss-security/2015/11/29/1","http://www.securityfocus.com/bid/82990","https://bto.bluecoat.com/security-advisory/sa128","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731","https://security.gentoo.org/glsa/201607-02","https://security.netapp.com/advisory/ntap-20230216-0002/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8387","description":"PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of service (integer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-3733","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-3733","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3733","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3733","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3733","date":"2026-10-08","epss":0.04675,"percentile":0.91534}],"risk":2.688125,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3733","description":"There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3733","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3733","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3733","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3733","date":"2026-10-08","epss":0.04675,"percentile":0.91534}],"urls":["https://bugs.python.org/issue43075","https://bugzilla.redhat.com/show_bug.cgi?id=1995234","https://github.com/python/cpython/commit/7215d1ae25525c92b026166f9d5cac85fb","https://github.com/python/cpython/pull/24391","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html","https://security.netapp.com/advisory/ntap-20220407-0001/","https://ubuntu.com/security/CVE-2021-3733","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3733","description":"There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-3733","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-3733","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3733","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3733","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3733","date":"2026-10-08","epss":0.04675,"percentile":0.91534}],"risk":2.688125,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3733","description":"There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3733","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3733","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3733","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3733","date":"2026-10-08","epss":0.04675,"percentile":0.91534}],"urls":["https://bugs.python.org/issue43075","https://bugzilla.redhat.com/show_bug.cgi?id=1995234","https://github.com/python/cpython/commit/7215d1ae25525c92b026166f9d5cac85fb","https://github.com/python/cpython/pull/24391","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html","https://security.netapp.com/advisory/ntap-20220407-0001/","https://ubuntu.com/security/CVE-2021-3733","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3733","description":"There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-36225","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-36225","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36225","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36225","date":"2026-10-08","epss":0.043,"percentile":0.90884}],"risk":2.6874999999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-36225","description":"A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service."},"relatedVulnerabilities":[{"id":"CVE-2020-36225","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36225","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36225","date":"2026-10-08","epss":0.043,"percentile":0.90884}],"urls":["http://seclists.org/fulldisclosure/2021/May/64","http://seclists.org/fulldisclosure/2021/May/65","http://seclists.org/fulldisclosure/2021/May/70","https://bugs.openldap.org/show_bug.cgi?id=9412","https://git.openldap.org/openldap/openldap/-/commit/554dff1927176579d652f2fe60c90e9abbad4c65","https://git.openldap.org/openldap/openldap/-/commit/5a2017d4e61a6ddc4dcb4415028e0d08eb6bca26","https://git.openldap.org/openldap/openldap/-/commit/c0b61a9486508e5202aa2e0cfb68c9813731b439","https://git.openldap.org/openldap/openldap/-/commit/d169e7958a3e0dc70f59c8374bf8a59833b7bdd8","https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html","https://security.netapp.com/advisory/ntap-20210226-0002/","https://support.apple.com/kb/HT212529","https://support.apple.com/kb/HT212530","https://support.apple.com/kb/HT212531","https://www.debian.org/security/2021/dsa-4845"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-36225","description":"A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-36223","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-36223","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36223","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-36223","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36223","date":"2026-10-08","epss":0.043,"percentile":0.90883}],"risk":2.6874999999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-36223","description":"A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read)."},"relatedVulnerabilities":[{"id":"CVE-2020-36223","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36223","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-36223","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36223","date":"2026-10-08","epss":0.043,"percentile":0.90883}],"urls":["http://seclists.org/fulldisclosure/2021/May/64","http://seclists.org/fulldisclosure/2021/May/65","http://seclists.org/fulldisclosure/2021/May/70","https://bugs.openldap.org/show_bug.cgi?id=9408","https://git.openldap.org/openldap/openldap/-/commit/21981053a1195ae1555e23df4d9ac68d34ede9dd","https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html","https://security.netapp.com/advisory/ntap-20210226-0002/","https://support.apple.com/kb/HT212529","https://support.apple.com/kb/HT212530","https://support.apple.com/kb/HT212531","https://www.debian.org/security/2021/dsa-4845"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-36223","description":"A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read)."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-36224","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-36224","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36224","cwe":"CWE-763","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36224","date":"2026-10-08","epss":0.043,"percentile":0.90883}],"risk":2.6874999999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-36224","description":"A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service."},"relatedVulnerabilities":[{"id":"CVE-2020-36224","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36224","cwe":"CWE-763","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36224","date":"2026-10-08","epss":0.043,"percentile":0.90883}],"urls":["http://seclists.org/fulldisclosure/2021/May/64","http://seclists.org/fulldisclosure/2021/May/65","http://seclists.org/fulldisclosure/2021/May/70","https://bugs.openldap.org/show_bug.cgi?id=9409","https://git.openldap.org/openldap/openldap/-/commit/554dff1927176579d652f2fe60c90e9abbad4c65","https://git.openldap.org/openldap/openldap/-/commit/5a2017d4e61a6ddc4dcb4415028e0d08eb6bca26","https://git.openldap.org/openldap/openldap/-/commit/c0b61a9486508e5202aa2e0cfb68c9813731b439","https://git.openldap.org/openldap/openldap/-/commit/d169e7958a3e0dc70f59c8374bf8a59833b7bdd8","https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html","https://security.netapp.com/advisory/ntap-20210226-0002/","https://support.apple.com/kb/HT212529","https://support.apple.com/kb/HT212530","https://support.apple.com/kb/HT212531","https://www.debian.org/security/2021/dsa-4845"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-36224","description":"A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-36229","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-36229","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36229","cwe":"CWE-843","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36229","date":"2026-10-08","epss":0.043,"percentile":0.90883}],"risk":2.6874999999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-36229","description":"A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service."},"relatedVulnerabilities":[{"id":"CVE-2020-36229","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-36229","cwe":"CWE-843","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-36229","date":"2026-10-08","epss":0.043,"percentile":0.90883}],"urls":["http://seclists.org/fulldisclosure/2021/May/64","http://seclists.org/fulldisclosure/2021/May/65","http://seclists.org/fulldisclosure/2021/May/70","https://bugs.openldap.org/show_bug.cgi?id=9425","https://git.openldap.org/openldap/openldap/-/commit/4bdfffd2889c0c5cdf58bebafbdc8fce4bb2bff0","https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html","https://security.netapp.com/advisory/ntap-20210226-0002/","https://support.apple.com/kb/HT212529","https://support.apple.com/kb/HT212530","https://support.apple.com/kb/HT212531","https://www.debian.org/security/2021/dsa-4845"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-36229","description":"A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service."}]},{"artifact":{"id":"8a7d97338866cd1c","cpes":["cpe:2.3:a:binutils:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:rpm/centos/binutils@2.25.1-32.base.el7_4.1?arch=x86_64&distro=centos-7&upstream=binutils-2.25.1-32.base.el7_4.1.src.rpm","type":"rpm","version":"2.25.1-32.base.el7_4.1","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-9746","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"binutils","version":"0:2.25.1-32.base.el7_4.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9746","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9746","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9746","date":"2026-10-08","epss":0.08506,"percentile":0.94911}],"risk":2.6793899999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9746","description":"The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during \"objdump -D\" execution."},"relatedVulnerabilities":[{"id":"CVE-2017-9746","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9746","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9746","date":"2026-10-08","epss":0.08506,"percentile":0.94911}],"urls":["http://www.securityfocus.com/bid/99117","https://security.gentoo.org/glsa/201801-01","https://sourceware.org/bugzilla/show_bug.cgi?id=21580","https://www.exploit-db.com/exploits/42199/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9746","description":"The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during \"objdump -D\" execution."}]},{"artifact":{"id":"8a7d97338866cd1c","cpes":["cpe:2.3:a:binutils:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:rpm/centos/binutils@2.25.1-32.base.el7_4.1?arch=x86_64&distro=centos-7&upstream=binutils-2.25.1-32.base.el7_4.1.src.rpm","type":"rpm","version":"2.25.1-32.base.el7_4.1","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-9749","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"binutils","version":"0:2.25.1-32.base.el7_4.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9749","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9749","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9749","date":"2026-10-08","epss":0.08506,"percentile":0.94911}],"risk":2.6793899999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9749","description":"The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."},"relatedVulnerabilities":[{"id":"CVE-2017-9749","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9749","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9749","date":"2026-10-08","epss":0.08506,"percentile":0.94911}],"urls":["http://www.securityfocus.com/bid/99113","https://security.gentoo.org/glsa/201801-01","https://sourceware.org/bugzilla/show_bug.cgi?id=21586","https://www.exploit-db.com/exploits/42201/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9749","description":"The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-26.P2.el7_9.14"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-2828","versionConstraint":"< 32:9.11.4-26.P2.el7_9.14 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-2828","fix":{"state":"fixed","versions":["32:9.11.4-26.P2.el7_9.14"],"available":[{"date":"2023-07-19","kind":"first-observed","version":"32:9.11.4-26.P2.el7_9.14"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2828","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-2828","date":"2026-10-08","epss":0.03566,"percentile":0.89037}],"risk":2.6744999999999997,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2023:4152","link":"https://access.redhat.com/errata/RHSA-2023:4152"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-2828","description":"A vulnerability was found in BIND. The effectiveness of the cache-cleaning algorithm used in named can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured max-cache-size limit to exceed significantly."},"relatedVulnerabilities":[{"id":"CVE-2023-2828","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-2828","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-2828","date":"2026-10-08","epss":0.03566,"percentile":0.89037}],"urls":["http://www.openwall.com/lists/oss-security/2023/06/21/6","https://kb.isc.org/docs/cve-2023-2828","https://lists.debian.org/debian-lts-announce/2023/07/msg00021.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SEFCEVCTYEMKTWA7V7EYPI5YQQ4JWDLI/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3K6AJK7RRSR53HRF5GGKPA6PDUDWOD2/","https://security.netapp.com/advisory/ntap-20230703-0010/","https://www.debian.org/security/2023/dsa-5439"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-2828","description":"Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size` statement in the configuration file; it defaults to 90% of the total amount of memory available on the host. When the size of the cache reaches 7/8 of the configured limit, a cache-cleaning algorithm starts to remove expired and/or least-recently used RRsets from the cache, to keep memory use below the configured limit.\n\nIt has been discovered that the effectiveness of the cache-cleaning algorithm used in `named` can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured `max-cache-size` limit to be significantly exceeded.\nThis issue affects BIND 9 versions 9.11.0 through 9.16.41, 9.18.0 through 9.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-9049","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9049","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9049","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-9049","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-9049","date":"2026-10-08","epss":0.04626,"percentile":0.91463}],"risk":2.65995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9049","description":"libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398."},"relatedVulnerabilities":[{"id":"CVE-2017-9049","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9049","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-9049","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-9049","date":"2026-10-08","epss":0.04626,"percentile":0.91463}],"urls":["http://www.debian.org/security/2017/dsa-3952","http://www.openwall.com/lists/oss-security/2017/05/15/1","http://www.securityfocus.com/bid/98601","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201711-01"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9049","description":"libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-9050","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9050","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9050","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-9050","cwe":"CWE-122","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-9050","date":"2026-10-08","epss":0.04626,"percentile":0.91463}],"risk":2.65995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9050","description":"libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839."},"relatedVulnerabilities":[{"id":"CVE-2017-9050","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9050","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-9050","cwe":"CWE-122","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-9050","date":"2026-10-08","epss":0.04626,"percentile":0.91463}],"urls":["http://www.debian.org/security/2017/dsa-3952","http://www.openwall.com/lists/oss-security/2017/05/15/1","http://www.securityfocus.com/bid/98568","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201711-01"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9050","description":"libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-9049","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9049","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9049","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-9049","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-9049","date":"2026-10-08","epss":0.04626,"percentile":0.91463}],"risk":2.65995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9049","description":"libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398."},"relatedVulnerabilities":[{"id":"CVE-2017-9049","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9049","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-9049","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-9049","date":"2026-10-08","epss":0.04626,"percentile":0.91463}],"urls":["http://www.debian.org/security/2017/dsa-3952","http://www.openwall.com/lists/oss-security/2017/05/15/1","http://www.securityfocus.com/bid/98601","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201711-01"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9049","description":"libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-9050","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9050","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9050","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-9050","cwe":"CWE-122","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-9050","date":"2026-10-08","epss":0.04626,"percentile":0.91463}],"risk":2.65995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9050","description":"libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839."},"relatedVulnerabilities":[{"id":"CVE-2017-9050","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9050","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-9050","cwe":"CWE-122","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-9050","date":"2026-10-08","epss":0.04626,"percentile":0.91463}],"urls":["http://www.debian.org/security/2017/dsa-3952","http://www.openwall.com/lists/oss-security/2017/05/15/1","http://www.securityfocus.com/bid/98568","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201711-01"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9050","description":"libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-1234","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-1234","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":3.4,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-1234","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-1234","date":"2026-10-08","epss":0.0539,"percentile":0.92468}],"risk":2.6411000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-1234","description":"Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name."},"relatedVulnerabilities":[{"id":"CVE-2016-1234","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-1234","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-1234","date":"2026-10-08","epss":0.0539,"percentile":0.92468}],"urls":["http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html","http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html","http://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html","http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html","http://seclists.org/fulldisclosure/2021/Sep/0","http://www.openwall.com/lists/oss-security/2016/03/07/16","http://www.securityfocus.com/bid/84204","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201702-11","https://sourceware.org/bugzilla/show_bug.cgi?id=19779","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=5171f3079f2cc53e0548fc4967361f4d1ce9d7ea"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-1234","description":"Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-1234","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-1234","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":3.4,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-1234","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-1234","date":"2026-10-08","epss":0.0539,"percentile":0.92468}],"risk":2.6411000000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-1234","description":"Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name."},"relatedVulnerabilities":[{"id":"CVE-2016-1234","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-1234","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-1234","date":"2026-10-08","epss":0.0539,"percentile":0.92468}],"urls":["http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html","http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html","http://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html","http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html","http://seclists.org/fulldisclosure/2021/Sep/0","http://www.openwall.com/lists/oss-security/2016/03/07/16","http://www.securityfocus.com/bid/84204","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201702-11","https://sourceware.org/bugzilla/show_bug.cgi?id=19779","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=5171f3079f2cc53e0548fc4967361f4d1ce9d7ea"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-1234","description":"Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24, when GLOB_ALTDIRFUNC is used, allows context-dependent attackers to cause a denial of service (crash) via a long name."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-2328","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-2328","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-2328","cwe":"CWE-19","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-2328","date":"2026-10-08","epss":0.05244,"percentile":0.92321}],"risk":2.622,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-2328","description":"PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."},"relatedVulnerabilities":[{"id":"CVE-2015-2328","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-2328","cwe":"CWE-19","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-2328","date":"2026-10-08","epss":0.05244,"percentile":0.92321}],"urls":["http://rhn.redhat.com/errata/RHSA-2016-1025.html","http://rhn.redhat.com/errata/RHSA-2016-2750.html","http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup","http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886","http://www.fortiguard.com/advisory/FG-VD-15-014/","http://www.openwall.com/lists/oss-security/2015/11/29/1","http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","http://www.securityfocus.com/bid/74924","https://bugs.exim.org/show_bug.cgi?id=1515","https://jira.mongodb.org/browse/SERVER-17252"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-2328","description":"PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-36226","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-36226","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2020-36226","date":"2026-10-08","epss":0.04184,"percentile":0.90665}],"risk":2.6149999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-36226","description":"A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service."},"relatedVulnerabilities":[{"id":"CVE-2020-36226","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2020-36226","date":"2026-10-08","epss":0.04184,"percentile":0.90665}],"urls":["http://seclists.org/fulldisclosure/2021/May/64","http://seclists.org/fulldisclosure/2021/May/65","http://seclists.org/fulldisclosure/2021/May/70","https://bugs.openldap.org/show_bug.cgi?id=9413","https://git.openldap.org/openldap/openldap/-/commit/554dff1927176579d652f2fe60c90e9abbad4c65","https://git.openldap.org/openldap/openldap/-/commit/5a2017d4e61a6ddc4dcb4415028e0d08eb6bca26","https://git.openldap.org/openldap/openldap/-/commit/c0b61a9486508e5202aa2e0cfb68c9813731b439","https://git.openldap.org/openldap/openldap/-/commit/d169e7958a3e0dc70f59c8374bf8a59833b7bdd8","https://git.openldap.org/openldap/openldap/-/tags/OPENLDAP_REL_ENG_2_4_57","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/02/msg00005.html","https://security.netapp.com/advisory/ntap-20210226-0002/","https://support.apple.com/kb/HT212529","https://support.apple.com/kb/HT212530","https://support.apple.com/kb/HT212531","https://www.debian.org/security/2021/dsa-4845"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-36226","description":"A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.56.1-9.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-27219","versionConstraint":"< 0:2.56.1-9.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-27219","fix":{"state":"fixed","versions":["0:2.56.1-9.el7_9"],"available":[{"date":"2021-06-01","kind":"first-observed","version":"0:2.56.1-9.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-27219","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-27219","date":"2026-10-08","epss":0.02993,"percentile":0.8694}],"risk":2.588945,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:2147","link":"https://access.redhat.com/errata/RHSA-2021:2147"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-27219","description":"An integer wraparound was discovered in glib due to passing a 64 bit sized value to function g_memdup() which accepts a 32 bits number as argument. An attacker may abuse this flaw when an application linked against the glib library uses g_bytes_new() function or possibly other functions that use g_memdup() underneath and accept a 64 bits argument as size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-27219","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-27219","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-27219","date":"2026-10-08","epss":0.02993,"percentile":0.8694}],"urls":["https://gitlab.gnome.org/GNOME/glib/-/issues/2319","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.debian.org/debian-lts-announce/2022/06/msg00006.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2REA7RVKN7ZHRLJOEGBRQKJIPZQPAELZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJMPNDO4GDVURYQFYKFOWY5HAF4FTEPN/","https://security.gentoo.org/glsa/202107-13","https://security.netapp.com/advisory/ntap-20210319-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-27219","description":"An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-89.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-16935","versionConstraint":"< 0:2.7.5-89.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-16935","fix":{"state":"fixed","versions":["0:2.7.5-89.el7"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:2.7.5-89.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-16935","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-16935","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-16935","date":"2026-10-08","epss":0.04653,"percentile":0.91501}],"risk":2.5824149999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:3911","link":"https://access.redhat.com/errata/RHSA-2020:3911"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-16935","description":"A reflected cross-site scripting (XSS) vulnerability was found in Python XML-RPC server. The `server_title` field is not sufficiently sanitized allowing malicious JavaScript to be injected. Successful exploitation would allow a remote attacker to execute JavaScript code within the context of the affected user."},"relatedVulnerabilities":[{"id":"CVE-2019-16935","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-16935","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-16935","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-16935","date":"2026-10-08","epss":0.04653,"percentile":0.91501}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00021.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","https://bugs.python.org/issue38243","https://github.com/python/cpython/blob/35c0809158be7feae4c4f877a08b93baea2d8291/Lib/xmlrpc/server.py#L897","https://github.com/python/cpython/blob/e007860b8b3609ce0bc62b1780efaa06241520bd/Lib/DocXMLRPCServer.py#L213","https://github.com/python/cpython/pull/16373","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2021/04/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEARDOTXCYPYELKBD2KWZ27GSPXDI3GQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OYGESQSGIHDCIGOBVF7VXCMIE6YDWRYB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/","https://security.netapp.com/advisory/ntap-20191017-0004/","https://usn.ubuntu.com/4151-1/","https://usn.ubuntu.com/4151-2/","https://www.oracle.com/security-alerts/cpujul2020.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-16935","description":"The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-89.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-16935","versionConstraint":"< 0:2.7.5-89.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-16935","fix":{"state":"fixed","versions":["0:2.7.5-89.el7"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:2.7.5-89.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-16935","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-16935","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-16935","date":"2026-10-08","epss":0.04653,"percentile":0.91501}],"risk":2.5824149999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:3911","link":"https://access.redhat.com/errata/RHSA-2020:3911"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-16935","description":"A reflected cross-site scripting (XSS) vulnerability was found in Python XML-RPC server. The `server_title` field is not sufficiently sanitized allowing malicious JavaScript to be injected. Successful exploitation would allow a remote attacker to execute JavaScript code within the context of the affected user."},"relatedVulnerabilities":[{"id":"CVE-2019-16935","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-16935","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-16935","cwe":"CWE-79","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-16935","date":"2026-10-08","epss":0.04653,"percentile":0.91501}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00012.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00021.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","https://bugs.python.org/issue38243","https://github.com/python/cpython/blob/35c0809158be7feae4c4f877a08b93baea2d8291/Lib/xmlrpc/server.py#L897","https://github.com/python/cpython/blob/e007860b8b3609ce0bc62b1780efaa06241520bd/Lib/DocXMLRPCServer.py#L213","https://github.com/python/cpython/pull/16373","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2021/04/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEARDOTXCYPYELKBD2KWZ27GSPXDI3GQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OYGESQSGIHDCIGOBVF7VXCMIE6YDWRYB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/","https://security.netapp.com/advisory/ntap-20191017-0004/","https://usn.ubuntu.com/4151-1/","https://usn.ubuntu.com/4151-2/","https://www.oracle.com/security-alerts/cpujul2020.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-16935","description":"The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server."}]},{"artifact":{"id":"a37bd45d74f5547a","cpes":["cpe:2.3:a:libssh2:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:rpm/centos/libssh2@1.4.3-10.el7_2.1?arch=x86_64&distro=centos-7&upstream=libssh2-1.4.3-10.el7_2.1.src.rpm","type":"rpm","version":"1.4.3-10.el7_2.1","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.4.3-12.el7_6.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-3863","versionConstraint":"< 0:1.4.3-12.el7_6.2 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libssh2","version":"0:1.4.3-10.el7_2.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-3863","fix":{"state":"fixed","versions":["0:1.4.3-12.el7_6.2"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:1.4.3-12.el7_6.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3863","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3863","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3863","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3863","date":"2026-10-08","epss":0.03437,"percentile":0.88638}],"risk":2.57775,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:0679","link":"https://access.redhat.com/errata/RHSA-2019:0679"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-3863","description":"A flaw was found in libssh2. A server could send a multiple keyboard interactive response messages, whose total length are greater than the unsigned char max characters. This value is used as an index to copy memory causing in an out of bounds memory write error. The highest threat from this vulnerability is to data confidentiality and integrity and system availability.\nThis affects only the SSH Client."},"relatedVulnerabilities":[{"id":"CVE-2019-3863","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3863","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3863","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3863","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3863","date":"2026-10-08","epss":0.03437,"percentile":0.88638}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","https://access.redhat.com/errata/RHSA-2019:0679","https://access.redhat.com/errata/RHSA-2019:1175","https://access.redhat.com/errata/RHSA-2019:1652","https://access.redhat.com/errata/RHSA-2019:1791","https://access.redhat.com/errata/RHSA-2019:1943","https://access.redhat.com/errata/RHSA-2019:2399","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3863","https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","https://seclists.org/bugtraq/2019/Apr/25","https://security.netapp.com/advisory/ntap-20190327-0005/","https://www.debian.org/security/2019/dsa-4431","https://www.libssh2.org/CVE-2019-3863.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-3863","description":"A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used by the SSH client as an index to copy memory causing in an out of bounds memory write error."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-23219","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-23219","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23219","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23219","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23219","date":"2026-10-08","epss":0.04293,"percentile":0.90869}],"risk":2.5758,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-23219","description":"A stack based buffer-overflow vulnerability was found in the deprecated compatibility function clnt_create() in the sunrpc's clnt_gen.c module of the GNU C Library (aka glibc) through 2.34. This vulnerability copies its hostname argument onto the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) lead to arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2022-23219","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23219","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23219","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23219","date":"2026-10-08","epss":0.04293,"percentile":0.90869}],"urls":["https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","https://security.gentoo.org/glsa/202208-24","https://sourceware.org/bugzilla/show_bug.cgi?id=22542","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-23219","description":"The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-23219","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-23219","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23219","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23219","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23219","date":"2026-10-08","epss":0.04293,"percentile":0.90869}],"risk":2.5758,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-23219","description":"A stack based buffer-overflow vulnerability was found in the deprecated compatibility function clnt_create() in the sunrpc's clnt_gen.c module of the GNU C Library (aka glibc) through 2.34. This vulnerability copies its hostname argument onto the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) lead to arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2022-23219","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23219","cwe":"CWE-120","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23219","cwe":"CWE-120","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23219","date":"2026-10-08","epss":0.04293,"percentile":0.90869}],"urls":["https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","https://security.gentoo.org/glsa/202208-24","https://sourceware.org/bugzilla/show_bug.cgi?id=22542","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-23219","description":"The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-8619","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-8619","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8619","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8619","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8619","date":"2026-10-08","epss":0.04989,"percentile":0.92}],"risk":2.569335,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-8619","description":"The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free."},"relatedVulnerabilities":[{"id":"CVE-2016-8619","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8619","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8619","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8619","date":"2026-10-08","epss":0.04989,"percentile":0.92}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/94100","http://www.securitytracker.com/id/1037192","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8619","https://curl.haxx.se/CVE-2016-8619.patch","https://curl.haxx.se/docs/adv_20161102E.html","https://security.gentoo.org/glsa/201701-47","https://www.tenable.com/security/tns-2016-21"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-8619","description":"The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-8619","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-8619","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8619","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8619","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8619","date":"2026-10-08","epss":0.04989,"percentile":0.92}],"risk":2.569335,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-8619","description":"The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free."},"relatedVulnerabilities":[{"id":"CVE-2016-8619","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8619","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8619","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8619","date":"2026-10-08","epss":0.04989,"percentile":0.92}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/94100","http://www.securitytracker.com/id/1037192","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8619","https://curl.haxx.se/CVE-2016-8619.patch","https://curl.haxx.se/docs/adv_20161102E.html","https://security.gentoo.org/glsa/201701-47","https://www.tenable.com/security/tns-2016-21"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-8619","description":"The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free."}]},{"artifact":{"id":"a37bd45d74f5547a","cpes":["cpe:2.3:a:libssh2:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:rpm/centos/libssh2@1.4.3-10.el7_2.1?arch=x86_64&distro=centos-7&upstream=libssh2-1.4.3-10.el7_2.1.src.rpm","type":"rpm","version":"1.4.3-10.el7_2.1","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-3860","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libssh2","version":"0:1.4.3-10.el7_2.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-3860","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3860","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3860","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3860","date":"2026-10-08","epss":0.05118,"percentile":0.92169}],"risk":2.559,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-3860","description":"An out of bounds read flaw was discovered in libssh2 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a denial of service or read data in the client memory."},"relatedVulnerabilities":[{"id":"CVE-2019-3860","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3860","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3860","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3860","date":"2026-10-08","epss":0.05118,"percentile":0.92169}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00072.html","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3860","https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","https://lists.debian.org/debian-lts-announce/2019/07/msg00028.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","https://seclists.org/bugtraq/2019/Apr/25","https://security.netapp.com/advisory/ntap-20190327-0005/","https://www.debian.org/security/2019/dsa-4431","https://www.libssh2.org/CVE-2019-3860.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-3860","description":"An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory."}]},{"artifact":{"id":"a37bd45d74f5547a","cpes":["cpe:2.3:a:libssh2:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:rpm/centos/libssh2@1.4.3-10.el7_2.1?arch=x86_64&distro=centos-7&upstream=libssh2-1.4.3-10.el7_2.1.src.rpm","type":"rpm","version":"1.4.3-10.el7_2.1","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.8.0-3.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-3861","versionConstraint":"< 0:1.8.0-3.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libssh2","version":"0:1.4.3-10.el7_2.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-3861","fix":{"state":"fixed","versions":["0:1.8.0-3.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:1.8.0-3.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3861","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3861","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3861","date":"2026-10-08","epss":0.05118,"percentile":0.92169}],"risk":2.559,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2136","link":"https://access.redhat.com/errata/RHSA-2019:2136"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-3861","description":"An out of bounds read flaw was discovered in libssh2 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a denial of service or read data in the client memory."},"relatedVulnerabilities":[{"id":"CVE-2019-3861","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5,"impactScore":3.4,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-3861","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2019-3861","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-3861","date":"2026-10-08","epss":0.05118,"percentile":0.92169}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00003.html","https://access.redhat.com/errata/RHSA-2019:2136","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3861","https://lists.debian.org/debian-lts-announce/2019/03/msg00032.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5DK6VO2CEUTAJFYIKWNZKEKYMYR3NO2O/","https://seclists.org/bugtraq/2019/Apr/25","https://security.netapp.com/advisory/ntap-20190327-0005/","https://www.debian.org/security/2019/dsa-4431","https://www.libssh2.org/CVE-2019-3861.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-3861","description":"An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-27218","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-27218","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-27218","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-27218","date":"2026-10-08","epss":0.0408,"percentile":0.90443}],"risk":2.5500000000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-27218","description":"An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation."},"relatedVulnerabilities":[{"id":"CVE-2021-27218","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-27218","cwe":"CWE-681","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-27218","date":"2026-10-08","epss":0.0408,"percentile":0.90443}],"urls":["https://gitlab.gnome.org/GNOME/glib/-/merge_requests/1942","https://gitlab.gnome.org/GNOME/glib/-/merge_requests/1944","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.debian.org/debian-lts-announce/2022/06/msg00006.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2REA7RVKN7ZHRLJOEGBRQKJIPZQPAELZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJMPNDO4GDVURYQFYKFOWY5HAF4FTEPN/","https://security.gentoo.org/glsa/202107-13","https://security.netapp.com/advisory/ntap-20210319-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-27218","description":"An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation."}]},{"artifact":{"id":"8a7d97338866cd1c","cpes":["cpe:2.3:a:binutils:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:rpm/centos/binutils@2.25.1-32.base.el7_4.1?arch=x86_64&distro=centos-7&upstream=binutils-2.25.1-32.base.el7_4.1.src.rpm","type":"rpm","version":"2.25.1-32.base.el7_4.1","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-9750","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"binutils","version":"0:2.25.1-32.base.el7_4.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9750","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9750","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9750","date":"2026-10-08","epss":0.08075,"percentile":0.94668}],"risk":2.5436249999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9750","description":"opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."},"relatedVulnerabilities":[{"id":"CVE-2017-9750","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9750","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9750","date":"2026-10-08","epss":0.08075,"percentile":0.94668}],"urls":["http://www.securityfocus.com/bid/99118","https://security.gentoo.org/glsa/201801-01","https://sourceware.org/bugzilla/show_bug.cgi?id=21587","https://www.exploit-db.com/exploits/42198/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9750","description":"opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."}]},{"artifact":{"id":"8a7d97338866cd1c","cpes":["cpe:2.3:a:binutils:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:rpm/centos/binutils@2.25.1-32.base.el7_4.1?arch=x86_64&distro=centos-7&upstream=binutils-2.25.1-32.base.el7_4.1.src.rpm","type":"rpm","version":"2.25.1-32.base.el7_4.1","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-9742","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"binutils","version":"0:2.25.1-32.base.el7_4.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9742","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9742","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9742","date":"2026-10-08","epss":0.08075,"percentile":0.94667}],"risk":2.5436249999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9742","description":"The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."},"relatedVulnerabilities":[{"id":"CVE-2017-9742","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9742","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9742","date":"2026-10-08","epss":0.08075,"percentile":0.94667}],"urls":["http://www.securityfocus.com/bid/99105","https://security.gentoo.org/glsa/201709-02","https://sourceware.org/bugzilla/show_bug.cgi?id=21576","https://www.exploit-db.com/exploits/42203/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9742","description":"The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."}]},{"artifact":{"id":"8a7d97338866cd1c","cpes":["cpe:2.3:a:binutils:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:rpm/centos/binutils@2.25.1-32.base.el7_4.1?arch=x86_64&distro=centos-7&upstream=binutils-2.25.1-32.base.el7_4.1.src.rpm","type":"rpm","version":"2.25.1-32.base.el7_4.1","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-9756","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"binutils","version":"0:2.25.1-32.base.el7_4.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9756","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9756","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9756","date":"2026-10-08","epss":0.08075,"percentile":0.94667}],"risk":2.5436249999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9756","description":"The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."},"relatedVulnerabilities":[{"id":"CVE-2017-9756","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9756","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9756","date":"2026-10-08","epss":0.08075,"percentile":0.94667}],"urls":["http://www.securityfocus.com/bid/99103","https://security.gentoo.org/glsa/201801-01","https://sourceware.org/bugzilla/show_bug.cgi?id=21595","https://www.exploit-db.com/exploits/42204/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9756","description":"The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-16.P2.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-6477","versionConstraint":"< 32:9.11.4-16.P2.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-6477","fix":{"state":"fixed","versions":["32:9.11.4-16.P2.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"32:9.11.4-16.P2.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-6477","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-6477","date":"2026-10-08","epss":0.04055,"percentile":0.90388}],"risk":2.5343750000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1061","link":"https://access.redhat.com/errata/RHSA-2020:1061"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-6477","description":"A flaw was found in the way bind limited the number of TCP clients that can be connected at any given time. A remote attacker could use one TCP client to send a large number of DNS requests over a single connection, causing exhaustion of the pool of file descriptors available to named, and potentially affecting network connections and the management of files such as log files or zone journal files."},"relatedVulnerabilities":[{"id":"CVE-2019-6477","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-6477","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-6477","date":"2026-10-08","epss":0.04055,"percentile":0.90388}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html","http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html","https://kb.isc.org/docs/cve-2019-6477","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3DEMNZMKR57VQJCG5ZN55ZGTQRL2TFQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XGURMGQHX45KR4QDRCSUQHODUFOGNGAN/","https://support.f5.com/csp/article/K15840535?utm_source=f5support&amp%3Butm_medium=RSS","https://www.debian.org/security/2020/dsa-4689","https://www.synology.com/security/advisory/Synology_SA_19_39"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-6477","description":"With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the server has been provisioned to handle. When a TCP connection with a large number of pipelined queries is closed, the load on the server releasing these multiple resources can cause it to become unresponsive, even for queries that can be answered authoritatively or from cache. (This is most likely to be perceived as an intermittent server problem)."}]},{"artifact":{"id":"5e8d763203aed06d","cpes":["cpe:2.3:a:ncurses:ncurses:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:ncurses:5.9-14.20130511.el7_4:*:*:*:*:*:*:*"],"name":"ncurses","purl":"pkg:rpm/centos/ncurses@5.9-14.20130511.el7_4?arch=x86_64&distro=centos-7&upstream=ncurses-5.9-14.20130511.el7_4.src.rpm","type":"rpm","version":"5.9-14.20130511.el7_4","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-10684","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"ncurses","version":"0:5.9-14.20130511.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-10684","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.3,"impactScore":4.3,"exploitabilityScore":1.1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-10684","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-10684","date":"2026-10-08","epss":0.04876,"percentile":0.91833}],"risk":2.5111399999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-10684","description":"In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack."},"relatedVulnerabilities":[{"id":"CVE-2017-10684","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-10684","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-10684","date":"2026-10-08","epss":0.04876,"percentile":0.91833}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1464687","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201804-13"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-10684","description":"In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack."}]},{"artifact":{"id":"a418ef820e807d72","cpes":["cpe:2.3:a:ncurses-base:ncurses-base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses-base:ncurses_base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_base:ncurses-base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_base:ncurses_base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses-base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses_base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:ncurses-base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:ncurses_base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*"],"name":"ncurses-base","purl":"pkg:rpm/centos/ncurses-base@5.9-14.20130511.el7_4?arch=noarch&distro=centos-7&upstream=ncurses-5.9-14.20130511.el7_4.src.rpm","type":"rpm","version":"5.9-14.20130511.el7_4","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ncurses","version":"5.9-14.20130511.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-10684","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"ncurses","version":"5.9-14.20130511.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-10684","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.3,"impactScore":4.3,"exploitabilityScore":1.1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-10684","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-10684","date":"2026-10-08","epss":0.04876,"percentile":0.91833}],"risk":2.5111399999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-10684","description":"In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack."},"relatedVulnerabilities":[{"id":"CVE-2017-10684","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-10684","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-10684","date":"2026-10-08","epss":0.04876,"percentile":0.91833}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1464687","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201804-13"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-10684","description":"In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack."}]},{"artifact":{"id":"726f67453c05d77f","cpes":["cpe:2.3:a:ncurses-libs:ncurses-libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses-libs:ncurses_libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_libs:ncurses-libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_libs:ncurses_libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses-libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses_libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:ncurses-libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:ncurses_libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*"],"name":"ncurses-libs","purl":"pkg:rpm/centos/ncurses-libs@5.9-14.20130511.el7_4?arch=x86_64&distro=centos-7&upstream=ncurses-5.9-14.20130511.el7_4.src.rpm","type":"rpm","version":"5.9-14.20130511.el7_4","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ncurses","version":"5.9-14.20130511.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-10684","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"ncurses","version":"5.9-14.20130511.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-10684","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.3,"impactScore":4.3,"exploitabilityScore":1.1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-10684","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-10684","date":"2026-10-08","epss":0.04876,"percentile":0.91833}],"risk":2.5111399999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-10684","description":"In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack."},"relatedVulnerabilities":[{"id":"CVE-2017-10684","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-10684","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-10684","date":"2026-10-08","epss":0.04876,"percentile":0.91833}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1464687","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201804-13"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-10684","description":"In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack."}]},{"artifact":{"id":"2439f8bce118b50f","cpes":["cpe:2.3:a:centos:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*"],"name":"sqlite","purl":"pkg:rpm/centos/sqlite@3.7.17-8.el7?arch=x86_64&distro=centos-7&upstream=sqlite-3.7.17-8.el7.src.rpm","type":"rpm","version":"3.7.17-8.el7","language":"","licenses":["Public Domain"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-8740","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"sqlite","version":"0:3.7.17-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-8740","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-8740","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-8740","date":"2026-10-08","epss":0.07966,"percentile":0.94609}],"risk":2.5092899999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-8740","description":"A NULL pointer dereference vulnerability was found in SQLite. Loading a database whose schema was corrupted using a CREATE TABLE AS statement would result in a SQLite crash."},"relatedVulnerabilities":[{"id":"CVE-2018-8740","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-8740","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-8740","date":"2026-10-08","epss":0.07966,"percentile":0.94609}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00050.html","http://www.securityfocus.com/bid/103466","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6964","https://bugs.launchpad.net/ubuntu/+source/sqlite3/+bug/1756349","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/01/msg00009.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html","https://lists.debian.org/debian-lts-announce/2023/05/msg00022.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU4NZ6DDU4BEM3ACM3FM6GLEPX56ZQXK/","https://usn.ubuntu.com/4205-1/","https://usn.ubuntu.com/4394-1/","https://www.sqlite.org/cgi/src/timeline?r=corrupt-schema","https://www.sqlite.org/cgi/src/vdiff?from=1774f1c3baf0bc3d&to=d75e67654aa9620b"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-8740","description":"In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c."}]},{"artifact":{"id":"a0e968f0d5303df3","cpes":["cpe:2.3:a:centos:cpio:2.11-25.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:cpio:cpio:2.11-25.el7_4:*:*:*:*:*:*:*"],"name":"cpio","purl":"pkg:rpm/centos/cpio@2.11-25.el7_4?arch=x86_64&distro=centos-7&upstream=cpio-2.11-25.el7_4.src.rpm","type":"rpm","version":"2.11-25.el7_4","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-38185","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"cpio","version":"0:2.11-25.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-38185","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-38185","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-38185","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-38185","date":"2026-10-08","epss":0.04165,"percentile":0.90623}],"risk":2.4989999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-38185","description":"A flaw was found in cpio. An integer overflow that triggers an out-of-bounds heap write can allow an attacker to execute arbitrary code via a crafted pattern file. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-38185","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-38185","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-38185","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-38185","date":"2026-10-08","epss":0.04165,"percentile":0.90623}],"urls":["https://git.savannah.gnu.org/cgit/cpio.git/commit/?id=dd96882877721703e19272fe25034560b794061b","https://github.com/fangqyi/cpiopwn","https://lists.debian.org/debian-lts-announce/2023/06/msg00007.html","https://lists.gnu.org/archive/html/bug-cpio/2021-08/msg00000.html","https://lists.gnu.org/archive/html/bug-cpio/2021-08/msg00002.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-38185","description":"GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-27778","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-27778","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27778","cwe":"CWE-706","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-27778","cwe":"CWE-706","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-27778","date":"2026-10-08","epss":0.03808,"percentile":0.89752}],"risk":2.4942400000000005,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-27778","description":"A vulnerability was found in curl. The issue occurs when removing the wrong file when \"--no-clobber\" is used together with \"--remove-on-error.\" This flaw leads to removing files by mistake or by a malicious actor."},"relatedVulnerabilities":[{"id":"CVE-2022-27778","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","metrics":{"baseScore":5.8,"impactScore":5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27778","cwe":"CWE-706","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-27778","cwe":"CWE-706","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-27778","date":"2026-10-08","epss":0.03808,"percentile":0.89752}],"urls":["https://hackerone.com/reports/1553598","https://security.netapp.com/advisory/ntap-20220609-0009/","https://security.netapp.com/advisory/ntap-20220729-0004/","https://www.oracle.com/security-alerts/cpujul2022.html","https://advisory.splunk.com/advisories/SVD-2023-0809","https://curl.se/docs/CVE-2022-27778.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-27778","description":"A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-27778","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-27778","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27778","cwe":"CWE-706","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-27778","cwe":"CWE-706","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-27778","date":"2026-10-08","epss":0.03808,"percentile":0.89752}],"risk":2.4942400000000005,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-27778","description":"A vulnerability was found in curl. The issue occurs when removing the wrong file when \"--no-clobber\" is used together with \"--remove-on-error.\" This flaw leads to removing files by mistake or by a malicious actor."},"relatedVulnerabilities":[{"id":"CVE-2022-27778","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","metrics":{"baseScore":5.8,"impactScore":5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27778","cwe":"CWE-706","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-27778","cwe":"CWE-706","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-27778","date":"2026-10-08","epss":0.03808,"percentile":0.89752}],"urls":["https://hackerone.com/reports/1553598","https://security.netapp.com/advisory/ntap-20220609-0009/","https://security.netapp.com/advisory/ntap-20220729-0004/","https://www.oracle.com/security-alerts/cpujul2022.html","https://advisory.splunk.com/advisories/SVD-2023-0809","https://curl.se/docs/CVE-2022-27778.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-27778","description":"A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-8618","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-8618","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8618","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8618","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8618","date":"2026-10-08","epss":0.04837,"percentile":0.91773}],"risk":2.4910550000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-8618","description":"The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables."},"relatedVulnerabilities":[{"id":"CVE-2016-8618","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8618","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8618","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8618","date":"2026-10-08","epss":0.04837,"percentile":0.91773}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/94098","http://www.securitytracker.com/id/1037192","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8618","https://curl.haxx.se/docs/adv_20161102D.html","https://security.gentoo.org/glsa/201701-47","https://www.tenable.com/security/tns-2016-21"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-8618","description":"The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-8618","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-8618","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8618","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8618","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8618","date":"2026-10-08","epss":0.04837,"percentile":0.91773}],"risk":2.4910550000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-8618","description":"The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables."},"relatedVulnerabilities":[{"id":"CVE-2016-8618","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8618","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8618","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8618","date":"2026-10-08","epss":0.04837,"percentile":0.91773}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/94098","http://www.securitytracker.com/id/1037192","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8618","https://curl.haxx.se/docs/adv_20161102D.html","https://security.gentoo.org/glsa/201701-47","https://www.tenable.com/security/tns-2016-21"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-8618","description":"The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-4429","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-4429","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-4429","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4429","date":"2026-10-08","epss":0.04543,"percentile":0.91327}],"risk":2.4759349999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-4429","description":"Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets."},"relatedVulnerabilities":[{"id":"CVE-2016-4429","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-4429","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4429","date":"2026-10-08","epss":0.04543,"percentile":0.91327}],"urls":["http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html","http://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html","http://www-01.ibm.com/support/docview.wss?uid=swg21995039","http://www.securityfocus.com/bid/102073","https://lists.debian.org/debian-lts-announce/2020/06/msg00027.html","https://source.android.com/security/bulletin/2017-12-01","https://sourceware.org/bugzilla/show_bug.cgi?id=20112","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=bc779a1a5b3035133024b21e2f339fe4219fb11c","https://usn.ubuntu.com/3759-1/","https://usn.ubuntu.com/3759-2/","https://www.oracle.com//security-alerts/cpujul2021.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-4429","description":"Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-4429","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-4429","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-4429","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4429","date":"2026-10-08","epss":0.04543,"percentile":0.91327}],"risk":2.4759349999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-4429","description":"Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets."},"relatedVulnerabilities":[{"id":"CVE-2016-4429","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-4429","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-4429","date":"2026-10-08","epss":0.04543,"percentile":0.91327}],"urls":["http://lists.opensuse.org/opensuse-updates/2016-06/msg00030.html","http://lists.opensuse.org/opensuse-updates/2016-07/msg00039.html","http://www-01.ibm.com/support/docview.wss?uid=swg21995039","http://www.securityfocus.com/bid/102073","https://lists.debian.org/debian-lts-announce/2020/06/msg00027.html","https://source.android.com/security/bulletin/2017-12-01","https://sourceware.org/bugzilla/show_bug.cgi?id=20112","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=bc779a1a5b3035133024b21e2f339fe4219fb11c","https://usn.ubuntu.com/3759-1/","https://usn.ubuntu.com/3759-2/","https://www.oracle.com//security-alerts/cpujul2021.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-4429","description":"Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote servers to cause a denial of service (crash) or possibly unspecified other impact via a flood of crafted ICMP and UDP packets."}]},{"artifact":{"id":"8a7d97338866cd1c","cpes":["cpe:2.3:a:binutils:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:rpm/centos/binutils@2.25.1-32.base.el7_4.1?arch=x86_64&distro=centos-7&upstream=binutils-2.25.1-32.base.el7_4.1.src.rpm","type":"rpm","version":"2.25.1-32.base.el7_4.1","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-9747","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"binutils","version":"0:2.25.1-32.base.el7_4.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9747","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9747","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9747","date":"2026-10-08","epss":0.07859,"percentile":0.94555}],"risk":2.4755849999999993,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9747","description":"The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution. NOTE: this may be related to a compiler bug."},"relatedVulnerabilities":[{"id":"CVE-2017-9747","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9747","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9747","date":"2026-10-08","epss":0.07859,"percentile":0.94555}],"urls":["http://www.securityfocus.com/bid/99114","https://sourceware.org/bugzilla/show_bug.cgi?id=21581","https://www.exploit-db.com/exploits/42200/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9747","description":"The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution. NOTE: this may be related to a compiler bug."}]},{"artifact":{"id":"8a7d97338866cd1c","cpes":["cpe:2.3:a:binutils:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:rpm/centos/binutils@2.25.1-32.base.el7_4.1?arch=x86_64&distro=centos-7&upstream=binutils-2.25.1-32.base.el7_4.1.src.rpm","type":"rpm","version":"2.25.1-32.base.el7_4.1","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-9748","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"binutils","version":"0:2.25.1-32.base.el7_4.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9748","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9748","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9748","date":"2026-10-08","epss":0.07859,"percentile":0.94555}],"risk":2.4755849999999993,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9748","description":"The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution. NOTE: this may be related to a compiler bug."},"relatedVulnerabilities":[{"id":"CVE-2017-9748","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9748","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9748","date":"2026-10-08","epss":0.07859,"percentile":0.94555}],"urls":["http://www.securityfocus.com/bid/99110","https://sourceware.org/bugzilla/show_bug.cgi?id=21582","https://www.exploit-db.com/exploits/42202/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9748","description":"The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution. NOTE: this may be related to a compiler bug."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-8615","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-8615","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8615","cwe":"CWE-99","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8615","cwe":"CWE-254","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8615","date":"2026-10-08","epss":0.04756,"percentile":0.91659}],"risk":2.44934,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-8615","description":"A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar."},"relatedVulnerabilities":[{"id":"CVE-2016-8615","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8615","cwe":"CWE-99","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8615","cwe":"CWE-254","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8615","date":"2026-10-08","epss":0.04756,"percentile":0.91659}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/94096","http://www.securitytracker.com/id/1037192","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8615","https://curl.haxx.se/CVE-2016-8615.patch","https://curl.haxx.se/docs/adv_20161102A.html","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201701-47","https://www.tenable.com/security/tns-2016-21"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-8615","description":"A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-8615","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-8615","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8615","cwe":"CWE-99","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8615","cwe":"CWE-254","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8615","date":"2026-10-08","epss":0.04756,"percentile":0.91659}],"risk":2.44934,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-8615","description":"A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar."},"relatedVulnerabilities":[{"id":"CVE-2016-8615","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8615","cwe":"CWE-99","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8615","cwe":"CWE-254","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8615","date":"2026-10-08","epss":0.04756,"percentile":0.91659}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/94096","http://www.securitytracker.com/id/1037192","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8615","https://curl.haxx.se/CVE-2016-8615.patch","https://curl.haxx.se/docs/adv_20161102A.html","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201701-47","https://www.tenable.com/security/tns-2016-21"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-8615","description":"A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2009-5155","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2009-5155","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2009-5155","cwe":"CWE-19","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2009-5155","date":"2026-10-08","epss":0.03906,"percentile":0.90012}],"risk":2.4412499999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2009-5155","description":"In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match."},"relatedVulnerabilities":[{"id":"CVE-2009-5155","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2009-5155","cwe":"CWE-19","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2009-5155","date":"2026-10-08","epss":0.03906,"percentile":0.90012}],"urls":["http://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=5513b40999149090987a0341c018d05d3eea1272","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=22793","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=32806","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34238","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.netapp.com/advisory/ntap-20190315-0002/","https://sourceware.org/bugzilla/show_bug.cgi?id=11053","https://sourceware.org/bugzilla/show_bug.cgi?id=18986","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=eb04c21373e2a2885f3d52ff192b0499afe3c672","https://support.f5.com/csp/article/K64119434","https://support.f5.com/csp/article/K64119434?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2009-5155","description":"In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2009-5155","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2009-5155","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2009-5155","cwe":"CWE-19","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2009-5155","date":"2026-10-08","epss":0.03906,"percentile":0.90012}],"risk":2.4412499999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2009-5155","description":"In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match."},"relatedVulnerabilities":[{"id":"CVE-2009-5155","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2009-5155","cwe":"CWE-19","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2009-5155","date":"2026-10-08","epss":0.03906,"percentile":0.90012}],"urls":["http://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=5513b40999149090987a0341c018d05d3eea1272","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=22793","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=32806","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34238","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.netapp.com/advisory/ntap-20190315-0002/","https://sourceware.org/bugzilla/show_bug.cgi?id=11053","https://sourceware.org/bugzilla/show_bug.cgi?id=18986","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=eb04c21373e2a2885f3d52ff192b0499afe3c672","https://support.f5.com/csp/article/K64119434","https://support.f5.com/csp/article/K64119434?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2009-5155","description":"In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses alternatives, which allows attackers to cause a denial of service (assertion failure and application exit) or trigger an incorrect result by attempting a regular-expression match."}]},{"artifact":{"id":"a46b4702cba559de","cpes":["cpe:2.3:a:centos:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss","purl":"pkg:rpm/centos/nss@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.53.1-7.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-25648","versionConstraint":"< 0:3.53.1-7.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"0:3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-25648","fix":{"state":"fixed","versions":["0:3.53.1-7.el7_9"],"available":[{"date":"2021-04-28","kind":"first-observed","version":"0:3.53.1-7.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-25648","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2020-25648","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-25648","date":"2026-10-08","epss":0.03901,"percentile":0.89997}],"risk":2.438125,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:1384","link":"https://access.redhat.com/errata/RHSA-2021:1384"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-25648","description":"A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-25648","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-25648","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2020-25648","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-25648","date":"2026-10-08","epss":0.03901,"percentile":0.89997}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1887319","https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.58_release_notes","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.debian.org/debian-lts-announce/2023/10/msg00039.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ERA5SVJQXQMDGES7RIT4F4NQVLD35RXN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRM53IQCPZT2US3M7JXTP6I6IBA5RGOD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RPOLN6DJUYQ3QBQEGLZGV73SNIPK7GHV/","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-25648","description":"A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58."}]},{"artifact":{"id":"4f9adc24f7b50922","cpes":["cpe:2.3:a:nss-sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-sysinit","purl":"pkg:rpm/centos/nss-sysinit@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.53.1-7.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-25648","versionConstraint":"< 0:3.53.1-7.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-25648","fix":{"state":"fixed","versions":["0:3.53.1-7.el7_9"],"available":[{"date":"2021-04-28","kind":"first-observed","version":"0:3.53.1-7.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-25648","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2020-25648","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-25648","date":"2026-10-08","epss":0.03901,"percentile":0.89997}],"risk":2.438125,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:1384","link":"https://access.redhat.com/errata/RHSA-2021:1384"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-25648","description":"A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-25648","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-25648","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2020-25648","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-25648","date":"2026-10-08","epss":0.03901,"percentile":0.89997}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1887319","https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.58_release_notes","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.debian.org/debian-lts-announce/2023/10/msg00039.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ERA5SVJQXQMDGES7RIT4F4NQVLD35RXN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRM53IQCPZT2US3M7JXTP6I6IBA5RGOD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RPOLN6DJUYQ3QBQEGLZGV73SNIPK7GHV/","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-25648","description":"A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58."}]},{"artifact":{"id":"00bceaeaf4078fe2","cpes":["cpe:2.3:a:nss-tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-tools","purl":"pkg:rpm/centos/nss-tools@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.53.1-7.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-25648","versionConstraint":"< 0:3.53.1-7.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-25648","fix":{"state":"fixed","versions":["0:3.53.1-7.el7_9"],"available":[{"date":"2021-04-28","kind":"first-observed","version":"0:3.53.1-7.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-25648","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2020-25648","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-25648","date":"2026-10-08","epss":0.03901,"percentile":0.89997}],"risk":2.438125,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:1384","link":"https://access.redhat.com/errata/RHSA-2021:1384"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-25648","description":"A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-25648","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-25648","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2020-25648","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-25648","date":"2026-10-08","epss":0.03901,"percentile":0.89997}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1887319","https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.58_release_notes","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.debian.org/debian-lts-announce/2023/10/msg00039.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ERA5SVJQXQMDGES7RIT4F4NQVLD35RXN/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRM53IQCPZT2US3M7JXTP6I6IBA5RGOD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RPOLN6DJUYQ3QBQEGLZGV73SNIPK7GHV/","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-25648","description":"A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-14.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-46143","versionConstraint":"< 0:2.1.0-14.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-46143","fix":{"state":"fixed","versions":["0:2.1.0-14.el7_9"],"available":[{"date":"2022-03-29","kind":"first-observed","version":"0:2.1.0-14.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-46143","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-46143","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-46143","date":"2026-10-08","epss":0.0379,"percentile":0.897}],"risk":2.4256,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:1069","link":"https://access.redhat.com/errata/RHSA-2022:1069"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-46143","description":"expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability, confidentiality and integrity."},"relatedVulnerabilities":[{"id":"CVE-2021-46143","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-46143","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-46143","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-46143","date":"2026-10-08","epss":0.0379,"percentile":0.897}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/17/3","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://github.com/libexpat/libexpat/issues/532","https://github.com/libexpat/libexpat/pull/538","https://security.gentoo.org/glsa/202209-24","https://security.netapp.com/advisory/ntap-20220121-0006/","https://www.debian.org/security/2022/dsa-5073","https://www.tenable.com/security/tns-2022-05"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-46143","description":"In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-260.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-6485","versionConstraint":"< 0:2.17-260.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-6485","fix":{"state":"fixed","versions":["0:2.17-260.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.17-260.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-6485","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-6485","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-6485","date":"2026-10-08","epss":0.04689,"percentile":0.91551}],"risk":2.414835,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3092","link":"https://access.redhat.com/errata/RHSA-2018:3092"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-6485","description":"An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption."},"relatedVulnerabilities":[{"id":"CVE-2018-6485","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-6485","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-6485","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-6485","date":"2026-10-08","epss":0.04689,"percentile":0.91551}],"urls":["http://bugs.debian.org/878159","http://www.securityfocus.com/bid/102912","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3092","https://security.netapp.com/advisory/ntap-20190404-0003/","https://sourceware.org/bugzilla/show_bug.cgi?id=22343","https://usn.ubuntu.com/4218-1/","https://usn.ubuntu.com/4416-1/","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-6485","description":"An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-260.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-6485","versionConstraint":"< 0:2.17-260.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-6485","fix":{"state":"fixed","versions":["0:2.17-260.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.17-260.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-6485","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-6485","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-6485","date":"2026-10-08","epss":0.04689,"percentile":0.91551}],"risk":2.414835,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3092","link":"https://access.redhat.com/errata/RHSA-2018:3092"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-6485","description":"An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption."},"relatedVulnerabilities":[{"id":"CVE-2018-6485","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-6485","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-6485","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-6485","date":"2026-10-08","epss":0.04689,"percentile":0.91551}],"urls":["http://bugs.debian.org/878159","http://www.securityfocus.com/bid/102912","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3092","https://security.netapp.com/advisory/ntap-20190404-0003/","https://sourceware.org/bugzilla/show_bug.cgi?id=22343","https://usn.ubuntu.com/4218-1/","https://usn.ubuntu.com/4416-1/","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-6485","description":"An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption."}]},{"artifact":{"id":"4e4067da03756568","cpes":["cpe:2.3:a:centos:libgcc:4.8.5-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc:4.8.5-16.el7:*:*:*:*:*:*:*"],"name":"libgcc","purl":"pkg:rpm/centos/libgcc@4.8.5-16.el7?arch=x86_64&distro=centos-7&upstream=gcc-4.8.5-16.el7.src.rpm","type":"rpm","version":"4.8.5-16.el7","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"4.8.5-16.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-28362","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gcc","version":"4.8.5-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-28362","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-28362","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-28362","date":"2026-10-08","epss":0.03859,"percentile":0.89893}],"risk":2.411875,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-28362","description":"A flaw was found in the math/big package of Go's standard library that causes a denial of service. Applications written in Go that use math/big via cryptographic packages, including crypto/rsa and crypto/x509, are vulnerable and can potentially cause panic via a crafted certificate chain. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-28362","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-28362","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-28362","date":"2026-10-08","epss":0.03859,"percentile":0.89893}],"urls":["https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI","https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontrol.apache.org%3E","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/","https://security.netapp.com/advisory/ntap-20201202-0004/","https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","description":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service."}]},{"artifact":{"id":"4a236f6ff2195b8a","cpes":["cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:4.8.5-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libstdc\\+\\+:4.8.5-16.el7:*:*:*:*:*:*:*"],"name":"libstdc++","purl":"pkg:rpm/centos/libstdc%2B%2B@4.8.5-16.el7?arch=x86_64&distro=centos-7&upstream=gcc-4.8.5-16.el7.src.rpm","type":"rpm","version":"4.8.5-16.el7","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"4.8.5-16.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-28362","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gcc","version":"4.8.5-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-28362","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-28362","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-28362","date":"2026-10-08","epss":0.03859,"percentile":0.89893}],"risk":2.411875,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-28362","description":"A flaw was found in the math/big package of Go's standard library that causes a denial of service. Applications written in Go that use math/big via cryptographic packages, including crypto/rsa and crypto/x509, are vulnerable and can potentially cause panic via a crafted certificate chain. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-28362","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-28362","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-28362","date":"2026-10-08","epss":0.03859,"percentile":0.89893}],"urls":["https://groups.google.com/g/golang-nuts/c/c-ssaaS7RMI","https://lists.apache.org/thread.html/rd02e75766cd333a0df417588460f5e4477060633000bfe94955851fd%40%3Cissues.trafficcontrol.apache.org%3E","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4COUPL3YVTZ6RTEIT6LPBDJUFF3VSP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F3ZSHGNTJWCWYAKY5OLZS2XQQYHSXSUO/","https://security.netapp.com/advisory/ntap-20201202-0004/","https://www.arista.com/en/support/advisories-notices/security-advisories/12166-security-advisory-62"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-28362","description":"Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service."}]},{"artifact":{"id":"6e67bef9af8fc97e","cpes":["cpe:2.3:a:centos:tar:2\\:1.26-32.el7:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:2\\:1.26-32.el7:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:rpm/centos/tar@1.26-32.el7?arch=x86_64&distro=centos-7&epoch=2&upstream=tar-1.26-32.el7.src.rpm","type":"rpm","version":"2:1.26-32.el7","language":"","licenses":["GPLv3+"],"metadata":{"epoch":2,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2005-2541","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"tar","version":"2:1.26-32.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2005-2541","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2005-2541","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2005-2541","date":"2026-10-08","epss":0.03992,"percentile":0.9025}],"risk":2.3951999999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2005-2541","description":"A flaw was found in tar utility that can allow the root user to extract files with preserved setuid and setgid permissions without any warning. This behavior can lead to the creation of malicious setuid executables owned by root from a crafted tar file, posing significant security risks."},"relatedVulnerabilities":[{"id":"CVE-2005-2541","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2005-2541","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2005-2541","date":"2026-10-08","epss":0.03992,"percentile":0.9025}],"urls":["http://marc.info/?l=bugtraq&m=112327628230258&w=2","https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2005-2541","description":"Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-15412","versionConstraint":"< 0:2.9.1-6.el7.4 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-15412","fix":{"state":"fixed","versions":["0:2.9.1-6.el7.4"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.9.1-6.el7.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-15412","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-15412","date":"2026-10-08","epss":0.02938,"percentile":0.86705}],"risk":2.39447,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1190","link":"https://access.redhat.com/errata/RHSA-2020:1190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-15412","description":"A use-after-free flaw was found in the libxml2 library. An attacker could use this flaw to cause an application linked against libxml2 to crash when parsing a specially crafted XML file."},"relatedVulnerabilities":[{"id":"CVE-2017-15412","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-15412","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-15412","date":"2026-10-08","epss":0.02938,"percentile":0.86705}],"urls":["http://www.securitytracker.com/id/1040348","https://access.redhat.com/errata/RHSA-2017:3401","https://access.redhat.com/errata/RHSA-2018:0287","https://bugzilla.gnome.org/show_bug.cgi?id=783160","https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html","https://crbug.com/727039","https://lists.debian.org/debian-lts-announce/2017/12/msg00014.html","https://security.gentoo.org/glsa/201801-03","https://www.debian.org/security/2018/dsa-4086"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-15412","description":"Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-15412","versionConstraint":"< 0:2.9.1-6.el7.4 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-15412","fix":{"state":"fixed","versions":["0:2.9.1-6.el7.4"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.9.1-6.el7.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-15412","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-15412","date":"2026-10-08","epss":0.02938,"percentile":0.86705}],"risk":2.39447,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1190","link":"https://access.redhat.com/errata/RHSA-2020:1190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-15412","description":"A use-after-free flaw was found in the libxml2 library. An attacker could use this flaw to cause an application linked against libxml2 to crash when parsing a specially crafted XML file."},"relatedVulnerabilities":[{"id":"CVE-2017-15412","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-15412","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-15412","date":"2026-10-08","epss":0.02938,"percentile":0.86705}],"urls":["http://www.securitytracker.com/id/1040348","https://access.redhat.com/errata/RHSA-2017:3401","https://access.redhat.com/errata/RHSA-2018:0287","https://bugzilla.gnome.org/show_bug.cgi?id=783160","https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html","https://crbug.com/727039","https://lists.debian.org/debian-lts-announce/2017/12/msg00014.html","https://security.gentoo.org/glsa/201801-03","https://www.debian.org/security/2018/dsa-4086"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-15412","description":"Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2013-1664","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2013-1664","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2013-1664","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2013-1664","date":"2026-10-08","epss":0.04771,"percentile":0.91681}],"risk":2.3855,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2013-1664","description":"The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack."},"relatedVulnerabilities":[{"id":"CVE-2013-1664","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2013-1664","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2013-1664","date":"2026-10-08","epss":0.04771,"percentile":0.91681}],"urls":["http://blog.python.org/2013/02/announcing-defusedxml-fixes-for-xml.html","http://bugs.python.org/issue17239","http://lists.openstack.org/pipermail/openstack-announce/2013-February/000078.html","http://rhn.redhat.com/errata/RHSA-2013-0657.html","http://rhn.redhat.com/errata/RHSA-2013-0658.html","http://rhn.redhat.com/errata/RHSA-2013-0670.html","http://ubuntu.com/usn/usn-1757-1","http://www.openwall.com/lists/oss-security/2013/02/19/2","http://www.openwall.com/lists/oss-security/2013/02/19/4","https://bugs.launchpad.net/nova/+bug/1100282"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2013-1664","description":"The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2013-1664","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2013-1664","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2013-1664","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2013-1664","date":"2026-10-08","epss":0.04771,"percentile":0.91681}],"risk":2.3855,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2013-1664","description":"The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack."},"relatedVulnerabilities":[{"id":"CVE-2013-1664","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2013-1664","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2013-1664","date":"2026-10-08","epss":0.04771,"percentile":0.91681}],"urls":["http://blog.python.org/2013/02/announcing-defusedxml-fixes-for-xml.html","http://bugs.python.org/issue17239","http://lists.openstack.org/pipermail/openstack-announce/2013-February/000078.html","http://rhn.redhat.com/errata/RHSA-2013-0657.html","http://rhn.redhat.com/errata/RHSA-2013-0658.html","http://rhn.redhat.com/errata/RHSA-2013-0670.html","http://ubuntu.com/usn/usn-1757-1","http://www.openwall.com/lists/oss-security/2013/02/19/2","http://www.openwall.com/lists/oss-security/2013/02/19/4","https://bugs.launchpad.net/nova/+bug/1100282"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2013-1664","description":"The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-26.P2.el7_9.10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-38177","versionConstraint":"< 32:9.11.4-26.P2.el7_9.10 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-38177","fix":{"state":"fixed","versions":["32:9.11.4-26.P2.el7_9.10"],"available":[{"date":"2022-10-04","kind":"first-observed","version":"32:9.11.4-26.P2.el7_9.10"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-38177","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-38177","cwe":"CWE-401","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-38177","date":"2026-10-08","epss":0.03172,"percentile":0.87652}],"risk":2.379,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:6765","link":"https://access.redhat.com/errata/RHSA-2022:6765"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-38177","description":"A flaw was found in the Bind package. By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak, resulting in crashing the program."},"relatedVulnerabilities":[{"id":"CVE-2022-38177","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-38177","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-38177","cwe":"CWE-401","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-38177","date":"2026-10-08","epss":0.03172,"percentile":0.87652}],"urls":["http://www.openwall.com/lists/oss-security/2022/09/21/3","https://kb.isc.org/docs/cve-2022-38177","https://lists.debian.org/debian-lts-announce/2022/10/msg00007.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/","https://security.gentoo.org/glsa/202210-25","https://security.netapp.com/advisory/ntap-20221228-0010/","https://www.debian.org/security/2022/dsa-5235"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-38177","description":"By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources."}]},{"artifact":{"id":"8909c1910ce849d7","cpes":["cpe:2.3:a:file-libs:file-libs:5.11-33.el7:*:*:*:*:*:*:*","cpe:2.3:a:file-libs:file_libs:5.11-33.el7:*:*:*:*:*:*:*","cpe:2.3:a:file_libs:file-libs:5.11-33.el7:*:*:*:*:*:*:*","cpe:2.3:a:file_libs:file_libs:5.11-33.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:file-libs:5.11-33.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:file_libs:5.11-33.el7:*:*:*:*:*:*:*","cpe:2.3:a:file:file-libs:5.11-33.el7:*:*:*:*:*:*:*","cpe:2.3:a:file:file_libs:5.11-33.el7:*:*:*:*:*:*:*"],"name":"file-libs","purl":"pkg:rpm/centos/file-libs@5.11-33.el7?arch=x86_64&distro=centos-7&upstream=file-5.11-33.el7.src.rpm","type":"rpm","version":"5.11-33.el7","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"file","version":"5.11-33.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2015-8865","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"file","version":"5.11-33.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8865","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8865","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8865","date":"2026-10-08","epss":0.05483,"percentile":0.92563}],"risk":2.3576899999999994,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8865","description":"The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5, mishandles continuation-level jumps, which allows context-dependent attackers to cause a denial of service (buffer overflow and application crash) or possibly execute arbitrary code via a crafted magic file."},"relatedVulnerabilities":[{"id":"CVE-2015-8865","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.3,"impactScore":5.9,"exploitabilityScore":1.4},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8865","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8865","date":"2026-10-08","epss":0.05483,"percentile":0.92563}],"urls":["http://bugs.gw.com/view.php?id=522","http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=fe13566c93f118a15a96320a546c7878fd0cfc5e","http://lists.apple.com/archives/security-announce/2016/May/msg00004.html","http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html","http://rhn.redhat.com/errata/RHSA-2016-2750.html","http://www.debian.org/security/2016/dsa-3560","http://www.openwall.com/lists/oss-security/2016/04/24/1","http://www.php.net/ChangeLog-5.php","http://www.php.net/ChangeLog-7.php","http://www.securityfocus.com/bid/85802","http://www.ubuntu.com/usn/USN-2952-1","http://www.ubuntu.com/usn/USN-2952-2","https://bugs.php.net/bug.php?id=71527","https://github.com/file/file/commit/6713ca45e7757297381f4b4cdb9cf5e624a9ad36","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731","https://security.gentoo.org/glsa/201611-22","https://security.gentoo.org/glsa/201701-42","https://support.apple.com/HT206567","https://usn.ubuntu.com/3686-1/","https://usn.ubuntu.com/3686-2/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8865","description":"The file_check_mem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5, mishandles continuation-level jumps, which allows context-dependent attackers to cause a denial of service (buffer overflow and application crash) or possibly execute arbitrary code via a crafted magic file."}]},{"artifact":{"id":"0e6bc16981a4025b","cpes":["cpe:2.3:a:centos:dracut:033-502.el7:*:*:*:*:*:*:*","cpe:2.3:a:dracut:dracut:033-502.el7:*:*:*:*:*:*:*"],"name":"dracut","purl":"pkg:rpm/centos/dracut@033-502.el7?arch=x86_64&distro=centos-7&upstream=dracut-033-502.el7.src.rpm","type":"rpm","version":"033-502.el7","language":"","licenses":["GPLv2+ and LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-6893","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"dracut","version":"0:033-502.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2026-6893","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6893","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-6893","cwe":"CWE-78","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-6893","date":"2026-10-08","epss":0.03138,"percentile":0.87515}],"risk":2.3535,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2026-6893","description":"A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior."},"relatedVulnerabilities":[{"id":"CVE-2026-6893","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6893","cwe":"CWE-78","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-6893","cwe":"CWE-78","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-6893","date":"2026-10-08","epss":0.03138,"percentile":0.87515}],"urls":["https://access.redhat.com/errata/RHSA-2026:26532","https://access.redhat.com/errata/RHSA-2026:26533","https://access.redhat.com/errata/RHSA-2026:26534","https://access.redhat.com/errata/RHSA-2026:26713","https://access.redhat.com/errata/RHSA-2026:57580","https://access.redhat.com/errata/RHSA-2026:57772","https://access.redhat.com/errata/RHSA-2026:57775","https://access.redhat.com/errata/RHSA-2026:57785","https://access.redhat.com/errata/RHSA-2026:61252","https://access.redhat.com/errata/RHSA-2026:62269","https://access.redhat.com/errata/RHSA-2026:62409","https://access.redhat.com/errata/RHSA-2026:62549","https://access.redhat.com/errata/RHSA-2026:63044","https://access.redhat.com/errata/RHSA-2026:65839","https://access.redhat.com/errata/RHSA-2026:65851","https://access.redhat.com/errata/RHSA-2026:67857","https://access.redhat.com/errata/RHSA-2026:69118","https://access.redhat.com/errata/RHSA-2026:69119","https://access.redhat.com/errata/RHSA-2026:70586","https://access.redhat.com/errata/RHSA-2026:70615","https://access.redhat.com/errata/RHSA-2026:74499","https://access.redhat.com/errata/RHSA-2026:79114","https://access.redhat.com/security/cve/CVE-2026-6893","https://bugzilla.redhat.com/show_bug.cgi?id=2459963","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6893.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6893","description":"A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-222.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2014-9402","versionConstraint":"< 0:2.17-222.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2014-9402","fix":{"state":"fixed","versions":["0:2.17-222.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.17-222.el7"}]},"cvss":[],"cwes":[{"cve":"CVE-2014-9402","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-9402","date":"2026-10-08","epss":0.07834,"percentile":0.94538}],"risk":2.3502,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0805","link":"https://access.redhat.com/errata/RHSA-2018:0805"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2014-9402","description":"The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive answer while a network name is being process."},"relatedVulnerabilities":[{"id":"CVE-2014-9402","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.8,"impactScore":6.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2014-9402","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-9402","date":"2026-10-08","epss":0.07834,"percentile":0.94538}],"urls":["http://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html","http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html","http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html","http://seclists.org/fulldisclosure/2019/Jun/18","http://seclists.org/fulldisclosure/2019/Sep/7","http://www.openwall.com/lists/oss-security/2014/12/18/1","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.securityfocus.com/bid/71670","http://www.ubuntu.com/usn/USN-2519-1","https://access.redhat.com/errata/RHSA-2018:0805","https://seclists.org/bugtraq/2019/Jun/14","https://seclists.org/bugtraq/2019/Sep/7","https://security.gentoo.org/glsa/201602-02","https://sourceware.org/bugzilla/show_bug.cgi?id=17630"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2014-9402","description":"The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive answer while a network name is being process."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-222.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2014-9402","versionConstraint":"< 0:2.17-222.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2014-9402","fix":{"state":"fixed","versions":["0:2.17-222.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.17-222.el7"}]},"cvss":[],"cwes":[{"cve":"CVE-2014-9402","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-9402","date":"2026-10-08","epss":0.07834,"percentile":0.94538}],"risk":2.3502,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0805","link":"https://access.redhat.com/errata/RHSA-2018:0805"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2014-9402","description":"The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive answer while a network name is being process."},"relatedVulnerabilities":[{"id":"CVE-2014-9402","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.8,"impactScore":6.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2014-9402","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-9402","date":"2026-10-08","epss":0.07834,"percentile":0.94538}],"urls":["http://lists.opensuse.org/opensuse-updates/2015-02/msg00089.html","http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html","http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html","http://seclists.org/fulldisclosure/2019/Jun/18","http://seclists.org/fulldisclosure/2019/Sep/7","http://www.openwall.com/lists/oss-security/2014/12/18/1","http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","http://www.securityfocus.com/bid/71670","http://www.ubuntu.com/usn/USN-2519-1","https://access.redhat.com/errata/RHSA-2018:0805","https://seclists.org/bugtraq/2019/Jun/14","https://seclists.org/bugtraq/2019/Sep/7","https://security.gentoo.org/glsa/201602-02","https://sourceware.org/bugzilla/show_bug.cgi?id=17630"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2014-9402","description":"The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive answer while a network name is being process."}]},{"artifact":{"id":"a46b4702cba559de","cpes":["cpe:2.3:a:centos:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss","purl":"pkg:rpm/centos/nss@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-7.el7_7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-11745","versionConstraint":"< 0:3.44.0-7.el7_7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"0:3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-11745","fix":{"state":"fixed","versions":["0:3.44.0-7.el7_7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:3.44.0-7.el7_7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11745","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11745","date":"2026-10-08","epss":0.02994,"percentile":0.86944}],"risk":2.3353200000000003,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:4190","link":"https://access.redhat.com/errata/RHSA-2019:4190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-11745","description":"A heap-based buffer overflow was found in the NSC_EncryptUpdate() function in Mozilla nss. A remote attacker could trigger this flaw via SRTP encrypt or decrypt operations, to execute arbitrary code with the permissions of the user running the application (compiled with nss). While the attack complexity is high, the impact to confidentiality, integrity, and availability are high as well."},"relatedVulnerabilities":[{"id":"CVE-2019-11745","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11745","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11745","date":"2026-10-08","epss":0.02994,"percentile":0.86944}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00006.html","https://access.redhat.com/errata/RHSA-2020:0243","https://access.redhat.com/errata/RHSA-2020:0466","https://bugzilla.mozilla.org/show_bug.cgi?id=1586176","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://security.gentoo.org/glsa/202003-02","https://security.gentoo.org/glsa/202003-10","https://security.gentoo.org/glsa/202003-37","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","https://usn.ubuntu.com/4241-1/","https://usn.ubuntu.com/4335-1/","https://www.mozilla.org/security/advisories/mfsa2019-36/","https://www.mozilla.org/security/advisories/mfsa2019-37/","https://www.mozilla.org/security/advisories/mfsa2019-38/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-11745","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71."}]},{"artifact":{"id":"92876d71e73259d4","cpes":["cpe:2.3:a:nss-softokn:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*"],"name":"nss-softokn","purl":"pkg:rpm/centos/nss-softokn@3.28.3-8.el7_4?arch=x86_64&distro=centos-7&upstream=nss-softokn-3.28.3-8.el7_4.src.rpm","type":"rpm","version":"3.28.3-8.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-8.el7_7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-11745","versionConstraint":"< 0:3.44.0-8.el7_7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-softokn","version":"0:3.28.3-8.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-11745","fix":{"state":"fixed","versions":["0:3.44.0-8.el7_7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:3.44.0-8.el7_7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11745","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11745","date":"2026-10-08","epss":0.02994,"percentile":0.86944}],"risk":2.3353200000000003,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:4190","link":"https://access.redhat.com/errata/RHSA-2019:4190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-11745","description":"A heap-based buffer overflow was found in the NSC_EncryptUpdate() function in Mozilla nss. A remote attacker could trigger this flaw via SRTP encrypt or decrypt operations, to execute arbitrary code with the permissions of the user running the application (compiled with nss). While the attack complexity is high, the impact to confidentiality, integrity, and availability are high as well."},"relatedVulnerabilities":[{"id":"CVE-2019-11745","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11745","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11745","date":"2026-10-08","epss":0.02994,"percentile":0.86944}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00006.html","https://access.redhat.com/errata/RHSA-2020:0243","https://access.redhat.com/errata/RHSA-2020:0466","https://bugzilla.mozilla.org/show_bug.cgi?id=1586176","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://security.gentoo.org/glsa/202003-02","https://security.gentoo.org/glsa/202003-10","https://security.gentoo.org/glsa/202003-37","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","https://usn.ubuntu.com/4241-1/","https://usn.ubuntu.com/4335-1/","https://www.mozilla.org/security/advisories/mfsa2019-36/","https://www.mozilla.org/security/advisories/mfsa2019-37/","https://www.mozilla.org/security/advisories/mfsa2019-38/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-11745","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71."}]},{"artifact":{"id":"25cd735f603572c2","cpes":["cpe:2.3:a:nss-softokn-freebl:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn-freebl:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn_freebl:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn_freebl:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*"],"name":"nss-softokn-freebl","purl":"pkg:rpm/centos/nss-softokn-freebl@3.28.3-8.el7_4?arch=x86_64&distro=centos-7&upstream=nss-softokn-3.28.3-8.el7_4.src.rpm","type":"rpm","version":"3.28.3-8.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss-softokn","version":"3.28.3-8.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-8.el7_7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-11745","versionConstraint":"< 0:3.44.0-8.el7_7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-softokn","version":"3.28.3-8.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-11745","fix":{"state":"fixed","versions":["0:3.44.0-8.el7_7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:3.44.0-8.el7_7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11745","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11745","date":"2026-10-08","epss":0.02994,"percentile":0.86944}],"risk":2.3353200000000003,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:4190","link":"https://access.redhat.com/errata/RHSA-2019:4190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-11745","description":"A heap-based buffer overflow was found in the NSC_EncryptUpdate() function in Mozilla nss. A remote attacker could trigger this flaw via SRTP encrypt or decrypt operations, to execute arbitrary code with the permissions of the user running the application (compiled with nss). While the attack complexity is high, the impact to confidentiality, integrity, and availability are high as well."},"relatedVulnerabilities":[{"id":"CVE-2019-11745","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11745","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11745","date":"2026-10-08","epss":0.02994,"percentile":0.86944}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00006.html","https://access.redhat.com/errata/RHSA-2020:0243","https://access.redhat.com/errata/RHSA-2020:0466","https://bugzilla.mozilla.org/show_bug.cgi?id=1586176","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://security.gentoo.org/glsa/202003-02","https://security.gentoo.org/glsa/202003-10","https://security.gentoo.org/glsa/202003-37","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","https://usn.ubuntu.com/4241-1/","https://usn.ubuntu.com/4335-1/","https://www.mozilla.org/security/advisories/mfsa2019-36/","https://www.mozilla.org/security/advisories/mfsa2019-37/","https://www.mozilla.org/security/advisories/mfsa2019-38/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-11745","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71."}]},{"artifact":{"id":"4f9adc24f7b50922","cpes":["cpe:2.3:a:nss-sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-sysinit","purl":"pkg:rpm/centos/nss-sysinit@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-7.el7_7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-11745","versionConstraint":"< 0:3.44.0-7.el7_7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-11745","fix":{"state":"fixed","versions":["0:3.44.0-7.el7_7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:3.44.0-7.el7_7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11745","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11745","date":"2026-10-08","epss":0.02994,"percentile":0.86944}],"risk":2.3353200000000003,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:4190","link":"https://access.redhat.com/errata/RHSA-2019:4190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-11745","description":"A heap-based buffer overflow was found in the NSC_EncryptUpdate() function in Mozilla nss. A remote attacker could trigger this flaw via SRTP encrypt or decrypt operations, to execute arbitrary code with the permissions of the user running the application (compiled with nss). While the attack complexity is high, the impact to confidentiality, integrity, and availability are high as well."},"relatedVulnerabilities":[{"id":"CVE-2019-11745","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11745","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11745","date":"2026-10-08","epss":0.02994,"percentile":0.86944}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00006.html","https://access.redhat.com/errata/RHSA-2020:0243","https://access.redhat.com/errata/RHSA-2020:0466","https://bugzilla.mozilla.org/show_bug.cgi?id=1586176","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://security.gentoo.org/glsa/202003-02","https://security.gentoo.org/glsa/202003-10","https://security.gentoo.org/glsa/202003-37","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","https://usn.ubuntu.com/4241-1/","https://usn.ubuntu.com/4335-1/","https://www.mozilla.org/security/advisories/mfsa2019-36/","https://www.mozilla.org/security/advisories/mfsa2019-37/","https://www.mozilla.org/security/advisories/mfsa2019-38/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-11745","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71."}]},{"artifact":{"id":"00bceaeaf4078fe2","cpes":["cpe:2.3:a:nss-tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-tools","purl":"pkg:rpm/centos/nss-tools@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-7.el7_7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-11745","versionConstraint":"< 0:3.44.0-7.el7_7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-11745","fix":{"state":"fixed","versions":["0:3.44.0-7.el7_7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:3.44.0-7.el7_7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11745","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11745","date":"2026-10-08","epss":0.02994,"percentile":0.86944}],"risk":2.3353200000000003,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:4190","link":"https://access.redhat.com/errata/RHSA-2019:4190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-11745","description":"A heap-based buffer overflow was found in the NSC_EncryptUpdate() function in Mozilla nss. A remote attacker could trigger this flaw via SRTP encrypt or decrypt operations, to execute arbitrary code with the permissions of the user running the application (compiled with nss). While the attack complexity is high, the impact to confidentiality, integrity, and availability are high as well."},"relatedVulnerabilities":[{"id":"CVE-2019-11745","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11745","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11745","date":"2026-10-08","epss":0.02994,"percentile":0.86944}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00006.html","https://access.redhat.com/errata/RHSA-2020:0243","https://access.redhat.com/errata/RHSA-2020:0466","https://bugzilla.mozilla.org/show_bug.cgi?id=1586176","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://security.gentoo.org/glsa/202003-02","https://security.gentoo.org/glsa/202003-10","https://security.gentoo.org/glsa/202003-37","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","https://usn.ubuntu.com/4241-1/","https://usn.ubuntu.com/4335-1/","https://www.mozilla.org/security/advisories/mfsa2019-36/","https://www.mozilla.org/security/advisories/mfsa2019-37/","https://www.mozilla.org/security/advisories/mfsa2019-38/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-11745","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71."}]},{"artifact":{"id":"4b9171b2fdf0504a","cpes":["cpe:2.3:a:nss-util:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss-util:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_util:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_util:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*"],"name":"nss-util","purl":"pkg:rpm/centos/nss-util@3.28.4-3.el7?arch=x86_64&distro=centos-7&upstream=nss-util-3.28.4-3.el7.src.rpm","type":"rpm","version":"3.28.4-3.el7","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-4.el7_7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-11745","versionConstraint":"< 0:3.44.0-4.el7_7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-util","version":"0:3.28.4-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-11745","fix":{"state":"fixed","versions":["0:3.44.0-4.el7_7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:3.44.0-4.el7_7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11745","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11745","date":"2026-10-08","epss":0.02994,"percentile":0.86944}],"risk":2.3353200000000003,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:4190","link":"https://access.redhat.com/errata/RHSA-2019:4190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-11745","description":"A heap-based buffer overflow was found in the NSC_EncryptUpdate() function in Mozilla nss. A remote attacker could trigger this flaw via SRTP encrypt or decrypt operations, to execute arbitrary code with the permissions of the user running the application (compiled with nss). While the attack complexity is high, the impact to confidentiality, integrity, and availability are high as well."},"relatedVulnerabilities":[{"id":"CVE-2019-11745","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11745","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11745","date":"2026-10-08","epss":0.02994,"percentile":0.86944}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00001.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00006.html","https://access.redhat.com/errata/RHSA-2020:0243","https://access.redhat.com/errata/RHSA-2020:0466","https://bugzilla.mozilla.org/show_bug.cgi?id=1586176","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://security.gentoo.org/glsa/202003-02","https://security.gentoo.org/glsa/202003-10","https://security.gentoo.org/glsa/202003-37","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04","https://usn.ubuntu.com/4241-1/","https://usn.ubuntu.com/4335-1/","https://www.mozilla.org/security/advisories/mfsa2019-36/","https://www.mozilla.org/security/advisories/mfsa2019-37/","https://www.mozilla.org/security/advisories/mfsa2019-38/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-11745","description":"When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused heap corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71."}]},{"artifact":{"id":"e5ab675da5cb289c","cpes":["cpe:2.3:a:centos:nspr:4.13.1-1.0.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:nspr:nspr:4.13.1-1.0.el7_3:*:*:*:*:*:*:*"],"name":"nspr","purl":"pkg:rpm/centos/nspr@4.13.1-1.0.el7_3?arch=x86_64&distro=centos-7&upstream=nspr-4.13.1-1.0.el7_3.src.rpm","type":"rpm","version":"4.13.1-1.0.el7_3","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:4.25.0-2.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-17006","versionConstraint":"< 0:4.25.0-2.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nspr","version":"0:4.13.1-1.0.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-17006","fix":{"state":"fixed","versions":["0:4.25.0-2.el7_9"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:4.25.0-2.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17006","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-17006","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17006","date":"2026-10-08","epss":0.03558,"percentile":0.89009}],"risk":2.33049,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:4076","link":"https://access.redhat.com/errata/RHSA-2020:4076"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-17006","description":"A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2019-17006","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17006","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-17006","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17006","date":"2026-10-08","epss":0.03558,"percentile":0.89009}],"urls":["https://bugzilla.mozilla.org/show_bug.cgi?id=1539788","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes","https://security.netapp.com/advisory/ntap-20210129-0001/","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-17006","description":"In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow."}]},{"artifact":{"id":"a46b4702cba559de","cpes":["cpe:2.3:a:centos:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss","purl":"pkg:rpm/centos/nss@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.53.1-3.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-17006","versionConstraint":"< 0:3.53.1-3.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"0:3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-17006","fix":{"state":"fixed","versions":["0:3.53.1-3.el7_9"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:3.53.1-3.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17006","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-17006","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17006","date":"2026-10-08","epss":0.03558,"percentile":0.89009}],"risk":2.33049,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:4076","link":"https://access.redhat.com/errata/RHSA-2020:4076"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-17006","description":"A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2019-17006","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17006","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-17006","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17006","date":"2026-10-08","epss":0.03558,"percentile":0.89009}],"urls":["https://bugzilla.mozilla.org/show_bug.cgi?id=1539788","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes","https://security.netapp.com/advisory/ntap-20210129-0001/","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-17006","description":"In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow."}]},{"artifact":{"id":"92876d71e73259d4","cpes":["cpe:2.3:a:nss-softokn:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*"],"name":"nss-softokn","purl":"pkg:rpm/centos/nss-softokn@3.28.3-8.el7_4?arch=x86_64&distro=centos-7&upstream=nss-softokn-3.28.3-8.el7_4.src.rpm","type":"rpm","version":"3.28.3-8.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.53.1-6.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-17006","versionConstraint":"< 0:3.53.1-6.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-softokn","version":"0:3.28.3-8.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-17006","fix":{"state":"fixed","versions":["0:3.53.1-6.el7_9"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:3.53.1-6.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17006","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-17006","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17006","date":"2026-10-08","epss":0.03558,"percentile":0.89009}],"risk":2.33049,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:4076","link":"https://access.redhat.com/errata/RHSA-2020:4076"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-17006","description":"A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2019-17006","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17006","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-17006","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17006","date":"2026-10-08","epss":0.03558,"percentile":0.89009}],"urls":["https://bugzilla.mozilla.org/show_bug.cgi?id=1539788","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes","https://security.netapp.com/advisory/ntap-20210129-0001/","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-17006","description":"In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow."}]},{"artifact":{"id":"25cd735f603572c2","cpes":["cpe:2.3:a:nss-softokn-freebl:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn-freebl:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn_freebl:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn_freebl:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*"],"name":"nss-softokn-freebl","purl":"pkg:rpm/centos/nss-softokn-freebl@3.28.3-8.el7_4?arch=x86_64&distro=centos-7&upstream=nss-softokn-3.28.3-8.el7_4.src.rpm","type":"rpm","version":"3.28.3-8.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss-softokn","version":"3.28.3-8.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.53.1-6.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-17006","versionConstraint":"< 0:3.53.1-6.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-softokn","version":"3.28.3-8.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-17006","fix":{"state":"fixed","versions":["0:3.53.1-6.el7_9"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:3.53.1-6.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17006","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-17006","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17006","date":"2026-10-08","epss":0.03558,"percentile":0.89009}],"risk":2.33049,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:4076","link":"https://access.redhat.com/errata/RHSA-2020:4076"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-17006","description":"A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2019-17006","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17006","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-17006","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17006","date":"2026-10-08","epss":0.03558,"percentile":0.89009}],"urls":["https://bugzilla.mozilla.org/show_bug.cgi?id=1539788","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes","https://security.netapp.com/advisory/ntap-20210129-0001/","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-17006","description":"In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow."}]},{"artifact":{"id":"4f9adc24f7b50922","cpes":["cpe:2.3:a:nss-sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-sysinit","purl":"pkg:rpm/centos/nss-sysinit@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.53.1-3.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-17006","versionConstraint":"< 0:3.53.1-3.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-17006","fix":{"state":"fixed","versions":["0:3.53.1-3.el7_9"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:3.53.1-3.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17006","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-17006","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17006","date":"2026-10-08","epss":0.03558,"percentile":0.89009}],"risk":2.33049,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:4076","link":"https://access.redhat.com/errata/RHSA-2020:4076"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-17006","description":"A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2019-17006","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17006","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-17006","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17006","date":"2026-10-08","epss":0.03558,"percentile":0.89009}],"urls":["https://bugzilla.mozilla.org/show_bug.cgi?id=1539788","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes","https://security.netapp.com/advisory/ntap-20210129-0001/","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-17006","description":"In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow."}]},{"artifact":{"id":"00bceaeaf4078fe2","cpes":["cpe:2.3:a:nss-tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-tools","purl":"pkg:rpm/centos/nss-tools@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.53.1-3.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-17006","versionConstraint":"< 0:3.53.1-3.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-17006","fix":{"state":"fixed","versions":["0:3.53.1-3.el7_9"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:3.53.1-3.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17006","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-17006","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17006","date":"2026-10-08","epss":0.03558,"percentile":0.89009}],"risk":2.33049,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:4076","link":"https://access.redhat.com/errata/RHSA-2020:4076"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-17006","description":"A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2019-17006","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17006","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-17006","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17006","date":"2026-10-08","epss":0.03558,"percentile":0.89009}],"urls":["https://bugzilla.mozilla.org/show_bug.cgi?id=1539788","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes","https://security.netapp.com/advisory/ntap-20210129-0001/","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-17006","description":"In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow."}]},{"artifact":{"id":"4b9171b2fdf0504a","cpes":["cpe:2.3:a:nss-util:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss-util:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_util:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_util:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*"],"name":"nss-util","purl":"pkg:rpm/centos/nss-util@3.28.4-3.el7?arch=x86_64&distro=centos-7&upstream=nss-util-3.28.4-3.el7.src.rpm","type":"rpm","version":"3.28.4-3.el7","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.53.1-1.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-17006","versionConstraint":"< 0:3.53.1-1.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-util","version":"0:3.28.4-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-17006","fix":{"state":"fixed","versions":["0:3.53.1-1.el7_9"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:3.53.1-1.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17006","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-17006","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17006","date":"2026-10-08","epss":0.03558,"percentile":0.89009}],"risk":2.33049,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:4076","link":"https://access.redhat.com/errata/RHSA-2020:4076"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-17006","description":"A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability."},"relatedVulnerabilities":[{"id":"CVE-2019-17006","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17006","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-17006","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17006","date":"2026-10-08","epss":0.03558,"percentile":0.89009}],"urls":["https://bugzilla.mozilla.org/show_bug.cgi?id=1539788","https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf","https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes","https://security.netapp.com/advisory/ntap-20210129-0001/","https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-17006","description":"In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-29824","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-29824","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-29824","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-29824","date":"2026-10-08","epss":0.03753,"percentile":0.89597}],"risk":2.32686,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-29824","description":"A flaw was found in the libxml2 library in functions used to manipulate the xmlBuf and the xmlBuffer types. A substantial input causes values to calculate buffer sizes to overflow, resulting in an out-of-bounds write."},"relatedVulnerabilities":[{"id":"CVE-2022-29824","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-29824","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-29824","date":"2026-10-08","epss":0.03753,"percentile":0.89597}],"urls":["http://packetstormsecurity.com/files/167345/libxml2-xmlBufAdd-Heap-Buffer-Overflow.html","http://packetstormsecurity.com/files/169825/libxml2-xmlParseNameComplex-Integer-Overflow.html","https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a2408e09f13652049e5ffb0d26196b02ebab","https://gitlab.gnome.org/GNOME/libxml2/-/commit/6c283d83eccd940bcde15634ac8c7f100e3caefd","https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14","https://gitlab.gnome.org/GNOME/libxslt/-/tags","https://lists.debian.org/debian-lts-announce/2022/05/msg00023.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZOBT5Y6Y2QLDDX2HZGMV7MJMWGXORKK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3NVZVWFRBXBI3AKZZWUWY6INQQPQVSF/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P5363EDV5VHZ5C77ODA43RYDCPMA7ARM/","https://security.gentoo.org/glsa/202210-03","https://security.netapp.com/advisory/ntap-20220715-0006/","https://www.debian.org/security/2022/dsa-5142","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-29824","description":"In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-29824","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-29824","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-29824","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-29824","date":"2026-10-08","epss":0.03753,"percentile":0.89597}],"risk":2.32686,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-29824","description":"A flaw was found in the libxml2 library in functions used to manipulate the xmlBuf and the xmlBuffer types. A substantial input causes values to calculate buffer sizes to overflow, resulting in an out-of-bounds write."},"relatedVulnerabilities":[{"id":"CVE-2022-29824","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-29824","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-29824","date":"2026-10-08","epss":0.03753,"percentile":0.89597}],"urls":["http://packetstormsecurity.com/files/167345/libxml2-xmlBufAdd-Heap-Buffer-Overflow.html","http://packetstormsecurity.com/files/169825/libxml2-xmlParseNameComplex-Integer-Overflow.html","https://gitlab.gnome.org/GNOME/libxml2/-/commit/2554a2408e09f13652049e5ffb0d26196b02ebab","https://gitlab.gnome.org/GNOME/libxml2/-/commit/6c283d83eccd940bcde15634ac8c7f100e3caefd","https://gitlab.gnome.org/GNOME/libxml2/-/tags/v2.9.14","https://gitlab.gnome.org/GNOME/libxslt/-/tags","https://lists.debian.org/debian-lts-announce/2022/05/msg00023.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZOBT5Y6Y2QLDDX2HZGMV7MJMWGXORKK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3NVZVWFRBXBI3AKZZWUWY6INQQPQVSF/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P5363EDV5VHZ5C77ODA43RYDCPMA7ARM/","https://security.gentoo.org/glsa/202210-03","https://security.netapp.com/advisory/ntap-20220715-0006/","https://www.debian.org/security/2022/dsa-5142","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-29824","description":"In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2's buffer functions, for example libxslt through 1.1.35, is affected as well."}]},{"artifact":{"id":"7abaa2ce42e0b035","cpes":["cpe:2.3:a:python-urllib3:python-urllib3:1.10.2-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-urllib3:python_urllib3:1.10.2-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_urllib3:python-urllib3:1.10.2-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_urllib3:python_urllib3:1.10.2-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-urllib3:1.10.2-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_urllib3:1.10.2-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-urllib3:1.10.2-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_urllib3:1.10.2-3.el7:*:*:*:*:*:*:*"],"name":"python-urllib3","purl":"pkg:rpm/centos/python-urllib3@1.10.2-3.el7?arch=noarch&distro=centos-7&upstream=python-urllib3-1.10.2-3.el7.src.rpm","type":"rpm","version":"1.10.2-3.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.10.2-7.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-20060","versionConstraint":"< 0:1.10.2-7.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python-urllib3","version":"0:1.10.2-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-20060","fix":{"state":"fixed","versions":["0:1.10.2-7.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:1.10.2-7.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-20060","date":"2026-10-08","epss":0.04488,"percentile":0.91237}],"risk":2.3113200000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2272","link":"https://access.redhat.com/errata/RHSA-2019:2272"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-20060","description":"urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended hosts or transmitted in cleartext."},"relatedVulnerabilities":[{"id":"CVE-2018-20060","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-20060","date":"2026-10-08","epss":0.04488,"percentile":0.91237}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html","https://access.redhat.com/errata/RHSA-2019:2272","https://bugzilla.redhat.com/show_bug.cgi?id=1649153","https://github.com/urllib3/urllib3/blob/master/CHANGES.rst","https://github.com/urllib3/urllib3/issues/1316","https://github.com/urllib3/urllib3/pull/1346","https://lists.debian.org/debian-lts-announce/2021/06/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5SJERZEJDSUYQP7BNBXMBHRHGY26HRZD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BXLAXHM3Z6DUCXZ7ZXZ2EAYJXWDCZFCT/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWP36YW3KSVLXDBY3QJKDYEPCIMN3VQZ/","https://usn.ubuntu.com/3990-1/","https://security.netapp.com/advisory/ntap-20241227-0010/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20060","description":"urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended hosts or transmitted in cleartext."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-22876","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-22876","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22876","cwe":"CWE-359","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22876","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-22876","date":"2026-10-08","epss":0.05301,"percentile":0.92378}],"risk":2.305935,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-22876","description":"It was discovered that libcurl did not remove authentication credentials from URLs when automatically populating the Referer HTTP request header while handling HTTP redirects. This could lead to exposure of the credentials to the server to which requests were redirected."},"relatedVulnerabilities":[{"id":"CVE-2021-22876","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22876","cwe":"CWE-359","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22876","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-22876","date":"2026-10-08","epss":0.05301,"percentile":0.92378}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://curl.se/docs/CVE-2021-22876.html","https://hackerone.com/reports/1101882","https://lists.debian.org/debian-lts-announce/2021/05/msg00019.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/","https://security.gentoo.org/glsa/202105-36","https://security.netapp.com/advisory/ntap-20210521-0007/","https://www.oracle.com//security-alerts/cpujul2021.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-22876","description":"curl 7.1.1 to and including 7.75.0 is vulnerable to an \"Exposure of Private Personal Information to an Unauthorized Actor\" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-22876","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-22876","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22876","cwe":"CWE-359","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22876","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-22876","date":"2026-10-08","epss":0.05301,"percentile":0.92378}],"risk":2.305935,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-22876","description":"It was discovered that libcurl did not remove authentication credentials from URLs when automatically populating the Referer HTTP request header while handling HTTP redirects. This could lead to exposure of the credentials to the server to which requests were redirected."},"relatedVulnerabilities":[{"id":"CVE-2021-22876","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22876","cwe":"CWE-359","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22876","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-22876","date":"2026-10-08","epss":0.05301,"percentile":0.92378}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://curl.se/docs/CVE-2021-22876.html","https://hackerone.com/reports/1101882","https://lists.debian.org/debian-lts-announce/2021/05/msg00019.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/","https://security.gentoo.org/glsa/202105-36","https://security.netapp.com/advisory/ntap-20210521-0007/","https://www.oracle.com//security-alerts/cpujul2021.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-22876","description":"curl 7.1.1 to and including 7.75.0 is vulnerable to an \"Exposure of Private Personal Information to an Unauthorized Actor\" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-23990","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-23990","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23990","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23990","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23990","date":"2026-10-08","epss":0.03992,"percentile":0.90252}],"risk":2.2953999999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-23990","description":"A flaw was found in expat. The vulnerability occurs due to large content in element type declarations when there is an element declaration handler present which leads to an integer overflow. This flaw allows an attacker to inject an unsigned integer, leading to a crash or a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2022-23990","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-23990","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-23990","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-23990","date":"2026-10-08","epss":0.03992,"percentile":0.90252}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://github.com/libexpat/libexpat/pull/551","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/34NXVL2RZC2YZRV74ZQ3RNFB7WCEUP7D/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7FF2UH7MPXKTADYSJUAHI2Y5UHBSHUH/","https://security.gentoo.org/glsa/202209-24","https://www.debian.org/security/2022/dsa-5073","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.tenable.com/security/tns-2022-05"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-23990","description":"Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function."}]},{"artifact":{"id":"8a7d97338866cd1c","cpes":["cpe:2.3:a:binutils:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:rpm/centos/binutils@2.25.1-32.base.el7_4.1?arch=x86_64&distro=centos-7&upstream=binutils-2.25.1-32.base.el7_4.1.src.rpm","type":"rpm","version":"2.25.1-32.base.el7_4.1","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-2226","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"binutils","version":"0:2.25.1-32.base.el7_4.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-2226","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2226","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2226","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-2226","date":"2026-10-08","epss":0.07234,"percentile":0.94177}],"risk":2.27871,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-2226","description":"Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow."},"relatedVulnerabilities":[{"id":"CVE-2016-2226","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2226","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2226","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-2226","date":"2026-10-08","epss":0.07234,"percentile":0.94177}],"urls":["http://www.openwall.com/lists/oss-security/2016/05/05/5","http://www.securityfocus.com/bid/90103","https://gcc.gnu.org/bugzilla/show_bug.cgi?id=69687","https://www.exploit-db.com/exploits/42386/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2226","description":"Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow."}]},{"artifact":{"id":"4e4067da03756568","cpes":["cpe:2.3:a:centos:libgcc:4.8.5-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc:4.8.5-16.el7:*:*:*:*:*:*:*"],"name":"libgcc","purl":"pkg:rpm/centos/libgcc@4.8.5-16.el7?arch=x86_64&distro=centos-7&upstream=gcc-4.8.5-16.el7.src.rpm","type":"rpm","version":"4.8.5-16.el7","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"4.8.5-16.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-2226","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gcc","version":"4.8.5-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-2226","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2226","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2226","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-2226","date":"2026-10-08","epss":0.07234,"percentile":0.94177}],"risk":2.27871,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-2226","description":"Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow."},"relatedVulnerabilities":[{"id":"CVE-2016-2226","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2226","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2226","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-2226","date":"2026-10-08","epss":0.07234,"percentile":0.94177}],"urls":["http://www.openwall.com/lists/oss-security/2016/05/05/5","http://www.securityfocus.com/bid/90103","https://gcc.gnu.org/bugzilla/show_bug.cgi?id=69687","https://www.exploit-db.com/exploits/42386/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2226","description":"Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow."}]},{"artifact":{"id":"4a236f6ff2195b8a","cpes":["cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:4.8.5-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libstdc\\+\\+:4.8.5-16.el7:*:*:*:*:*:*:*"],"name":"libstdc++","purl":"pkg:rpm/centos/libstdc%2B%2B@4.8.5-16.el7?arch=x86_64&distro=centos-7&upstream=gcc-4.8.5-16.el7.src.rpm","type":"rpm","version":"4.8.5-16.el7","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"4.8.5-16.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-2226","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gcc","version":"4.8.5-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-2226","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2226","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2226","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-2226","date":"2026-10-08","epss":0.07234,"percentile":0.94177}],"risk":2.27871,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-2226","description":"Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow."},"relatedVulnerabilities":[{"id":"CVE-2016-2226","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2226","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2226","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-2226","date":"2026-10-08","epss":0.07234,"percentile":0.94177}],"urls":["http://www.openwall.com/lists/oss-security/2016/05/05/5","http://www.securityfocus.com/bid/90103","https://gcc.gnu.org/bugzilla/show_bug.cgi?id=69687","https://www.exploit-db.com/exploits/42386/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2226","description":"Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow."}]},{"artifact":{"id":"105c3f3269638a7a","cpes":["cpe:2.3:a:krb5-libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5-libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*"],"name":"krb5-libs","purl":"pkg:rpm/centos/krb5-libs@1.15.1-8.el7?arch=x86_64&distro=centos-7&upstream=krb5-1.15.1-8.el7.src.rpm","type":"rpm","version":"1.15.1-8.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"krb5","version":"1.15.1-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2015-2696","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"krb5","version":"1.15.1-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-2696","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-2696","cwe":"CWE-18","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-2696","date":"2026-10-08","epss":0.04543,"percentile":0.91327}],"risk":2.2715,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-2696","description":"A type-confusion flaw was discovered in MIT Kerberos, where it incorrectly deals with IAKERB context handles. \nIf an application calls gss_inquire_context() on a partially-established IAKERB context, an unauthenticated remote attacker could possibly exploit the flaw to crash the application (denial of service) by sending it a specially crafted IAKERB packet."},"relatedVulnerabilities":[{"id":"CVE-2015-2696","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-2696","cwe":"CWE-18","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-2696","date":"2026-10-08","epss":0.04543,"percentile":0.91327}],"urls":["http://krbdev.mit.edu/rt/Ticket/Display.html?id=8244","http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html","http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html","http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html","http://www.debian.org/security/2015/dsa-3395","http://www.securityfocus.com/bid/90675","http://www.securitytracker.com/id/1034084","http://www.ubuntu.com/usn/USN-2810-1","https://github.com/krb5/krb5/commit/e04f0283516e80d2f93366e0d479d13c9b5c8c2a","https://security.gentoo.org/glsa/201611-14"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-2696","description":"lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and process crash) via a crafted IAKERB packet that is mishandled during a gss_inquire_context call."}]},{"artifact":{"id":"2439f8bce118b50f","cpes":["cpe:2.3:a:centos:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*"],"name":"sqlite","purl":"pkg:rpm/centos/sqlite@3.7.17-8.el7?arch=x86_64&distro=centos-7&upstream=sqlite-3.7.17-8.el7.src.rpm","type":"rpm","version":"3.7.17-8.el7","language":"","licenses":["Public Domain"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-20218","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"sqlite","version":"0:3.7.17-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-20218","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-20218","cwe":"CWE-755","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-20218","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-20218","date":"2026-10-08","epss":0.03622,"percentile":0.89215}],"risk":2.26375,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-20218","description":"selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error."},"relatedVulnerabilities":[{"id":"CVE-2019-20218","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-20218","cwe":"CWE-755","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-20218","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-20218","date":"2026-10-08","epss":0.03622,"percentile":0.89215}],"urls":["https://github.com/sqlite/sqlite/commit/a6c1a71cde082e09750465d5675699062922e387","https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html","https://lists.debian.org/debian-lts-announce/2020/12/msg00016.html","https://security.gentoo.org/glsa/202007-26","https://usn.ubuntu.com/4298-1/","https://www.oracle.com/security-alerts/cpuapr2020.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-20218","description":"selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error."}]},{"artifact":{"id":"f0be1ba1ba4d8506","cpes":["cpe:2.3:a:systemd:systemd:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:centos:systemd:219-42.el7_4.4:*:*:*:*:*:*:*"],"name":"systemd","purl":"pkg:rpm/centos/systemd@219-42.el7_4.4?arch=x86_64&distro=centos-7&upstream=systemd-219-42.el7_4.4.src.rpm","type":"rpm","version":"219-42.el7_4.4","language":"","licenses":["LGPLv2+ and MIT and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:219-62.el7_6.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-16865","versionConstraint":"< 0:219-62.el7_6.2 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"systemd","version":"0:219-42.el7_4.4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-16865","fix":{"state":"fixed","versions":["0:219-62.el7_6.2"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:219-62.el7_6.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-16865","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-16865","cwe":"CWE-770","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-16865","date":"2026-10-08","epss":0.03016,"percentile":0.87035}],"risk":2.262,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:0049","link":"https://access.redhat.com/errata/RHSA-2019:0049"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-16865","description":"An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges."},"relatedVulnerabilities":[{"id":"CVE-2018-16865","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":4.6,"impactScore":6.5,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-16865","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-16865","cwe":"CWE-770","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-16865","date":"2026-10-08","epss":0.03016,"percentile":0.87035}],"urls":["http://packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.html","http://seclists.org/fulldisclosure/2019/May/21","http://www.openwall.com/lists/oss-security/2019/05/10/4","http://www.openwall.com/lists/oss-security/2021/07/20/2","http://www.securityfocus.com/bid/106525","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2019:0049","https://access.redhat.com/errata/RHSA-2019:0204","https://access.redhat.com/errata/RHSA-2019:0271","https://access.redhat.com/errata/RHSA-2019:0342","https://access.redhat.com/errata/RHSA-2019:0361","https://access.redhat.com/errata/RHSA-2019:2402","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16865","https://lists.debian.org/debian-lts-announce/2019/01/msg00016.html","https://seclists.org/bugtraq/2019/May/25","https://security.gentoo.org/glsa/201903-07","https://security.netapp.com/advisory/ntap-20190117-0001/","https://usn.ubuntu.com/3855-1/","https://www.debian.org/security/2019/dsa-4367","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.qualys.com/2019/01/09/system-down/system-down.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-16865","description":"An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable."}]},{"artifact":{"id":"6ec9c6d20c7e2032","cpes":["cpe:2.3:a:systemd-libs:systemd-libs:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:systemd-libs:systemd_libs:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:systemd_libs:systemd-libs:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:systemd_libs:systemd_libs:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:systemd:systemd-libs:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:systemd:systemd_libs:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:centos:systemd-libs:219-42.el7_4.4:*:*:*:*:*:*:*","cpe:2.3:a:centos:systemd_libs:219-42.el7_4.4:*:*:*:*:*:*:*"],"name":"systemd-libs","purl":"pkg:rpm/centos/systemd-libs@219-42.el7_4.4?arch=x86_64&distro=centos-7&upstream=systemd-219-42.el7_4.4.src.rpm","type":"rpm","version":"219-42.el7_4.4","language":"","licenses":["LGPLv2+ and MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"systemd","version":"219-42.el7_4.4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:219-62.el7_6.2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-16865","versionConstraint":"< 0:219-62.el7_6.2 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"systemd","version":"219-42.el7_4.4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-16865","fix":{"state":"fixed","versions":["0:219-62.el7_6.2"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:219-62.el7_6.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-16865","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-16865","cwe":"CWE-770","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-16865","date":"2026-10-08","epss":0.03016,"percentile":0.87035}],"risk":2.262,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:0049","link":"https://access.redhat.com/errata/RHSA-2019:0049"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-16865","description":"An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges."},"relatedVulnerabilities":[{"id":"CVE-2018-16865","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":4.6,"impactScore":6.5,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-16865","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2018-16865","cwe":"CWE-770","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-16865","date":"2026-10-08","epss":0.03016,"percentile":0.87035}],"urls":["http://packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.html","http://seclists.org/fulldisclosure/2019/May/21","http://www.openwall.com/lists/oss-security/2019/05/10/4","http://www.openwall.com/lists/oss-security/2021/07/20/2","http://www.securityfocus.com/bid/106525","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2019:0049","https://access.redhat.com/errata/RHSA-2019:0204","https://access.redhat.com/errata/RHSA-2019:0271","https://access.redhat.com/errata/RHSA-2019:0342","https://access.redhat.com/errata/RHSA-2019:0361","https://access.redhat.com/errata/RHSA-2019:2402","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16865","https://lists.debian.org/debian-lts-announce/2019/01/msg00016.html","https://seclists.org/bugtraq/2019/May/25","https://security.gentoo.org/glsa/201903-07","https://security.netapp.com/advisory/ntap-20190117-0001/","https://usn.ubuntu.com/3855-1/","https://www.debian.org/security/2019/dsa-4367","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.qualys.com/2019/01/09/system-down/system-down.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-16865","description":"An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2013-1665","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2013-1665","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2013-1665","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2013-1665","date":"2026-10-08","epss":0.04507,"percentile":0.91267}],"risk":2.2535,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2013-1665","description":"The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack."},"relatedVulnerabilities":[{"id":"CVE-2013-1665","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2013-1665","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2013-1665","date":"2026-10-08","epss":0.04507,"percentile":0.91267}],"urls":["http://blog.python.org/2013/02/announcing-defusedxml-fixes-for-xml.html","http://bugs.python.org/issue17239","http://lists.openstack.org/pipermail/openstack-announce/2013-February/000078.html","http://rhn.redhat.com/errata/RHSA-2013-0657.html","http://rhn.redhat.com/errata/RHSA-2013-0658.html","http://rhn.redhat.com/errata/RHSA-2013-0670.html","http://ubuntu.com/usn/usn-1757-1","http://www.debian.org/security/2013/dsa-2634","http://www.openwall.com/lists/oss-security/2013/02/19/2","http://www.openwall.com/lists/oss-security/2013/02/19/4","https://bugs.launchpad.net/keystone/+bug/1100279"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2013-1665","description":"The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2013-1665","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2013-1665","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2013-1665","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2013-1665","date":"2026-10-08","epss":0.04507,"percentile":0.91267}],"risk":2.2535,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2013-1665","description":"The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack."},"relatedVulnerabilities":[{"id":"CVE-2013-1665","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2013-1665","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2013-1665","date":"2026-10-08","epss":0.04507,"percentile":0.91267}],"urls":["http://blog.python.org/2013/02/announcing-defusedxml-fixes-for-xml.html","http://bugs.python.org/issue17239","http://lists.openstack.org/pipermail/openstack-announce/2013-February/000078.html","http://rhn.redhat.com/errata/RHSA-2013-0657.html","http://rhn.redhat.com/errata/RHSA-2013-0658.html","http://rhn.redhat.com/errata/RHSA-2013-0670.html","http://ubuntu.com/usn/usn-1757-1","http://www.debian.org/security/2013/dsa-2634","http://www.openwall.com/lists/oss-security/2013/02/19/2","http://www.openwall.com/lists/oss-security/2013/02/19/4","https://bugs.launchpad.net/keystone/+bug/1100279"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2013-1665","description":"The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity (XXE) attack."}]},{"artifact":{"id":"88816a92e3c9530c","cpes":["cpe:2.3:a:centos:libidn:1.28-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:libidn:libidn:1.28-4.el7:*:*:*:*:*:*:*"],"name":"libidn","purl":"pkg:rpm/centos/libidn@1.28-4.el7?arch=x86_64&distro=centos-7&upstream=libidn-1.28-4.el7.src.rpm","type":"rpm","version":"1.28-4.el7","language":"","licenses":["LGPLv2+ and GPLv3+ and GFDL"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-8948","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libidn","version":"0:1.28-4.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8948","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8948","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8948","date":"2026-10-08","epss":0.06721,"percentile":0.9377}],"risk":2.251535,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8948","description":"idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read."},"relatedVulnerabilities":[{"id":"CVE-2015-8948","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8948","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8948","date":"2026-10-08","epss":0.06721,"percentile":0.9377}],"urls":["http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=570e68886c41c2e765e6218cb317d9a9a447a041","http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html","http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html","http://www.debian.org/security/2016/dsa-3658","http://www.openwall.com/lists/oss-security/2016/07/20/6","http://www.openwall.com/lists/oss-security/2016/07/21/4","http://www.securityfocus.com/bid/92070","http://www.ubuntu.com/usn/USN-3068-1","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.gnu.org/archive/html/help-libidn/2016-07/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8948","description":"idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-26.P2.el7_9.10"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-38178","versionConstraint":"< 32:9.11.4-26.P2.el7_9.10 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-38178","fix":{"state":"fixed","versions":["32:9.11.4-26.P2.el7_9.10"],"available":[{"date":"2022-10-04","kind":"first-observed","version":"32:9.11.4-26.P2.el7_9.10"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-38178","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-38178","cwe":"CWE-401","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-38178","date":"2026-10-08","epss":0.03002,"percentile":0.8698}],"risk":2.2515,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:6765","link":"https://access.redhat.com/errata/RHSA-2022:6765"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-38178","description":"A flaw was found in the Bind package, where the DNSSEC verification code for the EdDSA algorithm leaks memory when there is a signature length mismatch. By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak, resulting in crashing the program."},"relatedVulnerabilities":[{"id":"CVE-2022-38178","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-38178","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-38178","cwe":"CWE-401","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-38178","date":"2026-10-08","epss":0.03002,"percentile":0.8698}],"urls":["http://www.openwall.com/lists/oss-security/2022/09/21/3","https://kb.isc.org/docs/cve-2022-38178","https://lists.debian.org/debian-lts-announce/2022/10/msg00007.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/","https://security.gentoo.org/glsa/202210-25","https://security.netapp.com/advisory/ntap-20221228-0009/","https://www.debian.org/security/2022/dsa-5235"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-38178","description":"By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-8625","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-8625","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8625","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8625","cwe":"CWE-20","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8625","date":"2026-10-08","epss":0.04321,"percentile":0.90916}],"risk":2.225315,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-8625","description":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host."},"relatedVulnerabilities":[{"id":"CVE-2016-8625","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8625","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8625","cwe":"CWE-20","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8625","date":"2026-10-08","epss":0.04321,"percentile":0.90916}],"urls":["http://www.securityfocus.com/bid/94107","http://www.securitytracker.com/id/1037192","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8625","https://curl.haxx.se/CVE-2016-8625.patch","https://curl.haxx.se/docs/adv_20161102K.html","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201701-47","https://www.tenable.com/security/tns-2016-21"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-8625","description":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-8625","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-8625","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8625","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8625","cwe":"CWE-20","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8625","date":"2026-10-08","epss":0.04321,"percentile":0.90916}],"risk":2.225315,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-8625","description":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host."},"relatedVulnerabilities":[{"id":"CVE-2016-8625","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8625","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8625","cwe":"CWE-20","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8625","date":"2026-10-08","epss":0.04321,"percentile":0.90916}],"urls":["http://www.securityfocus.com/bid/94107","http://www.securitytracker.com/id/1037192","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8625","https://curl.haxx.se/CVE-2016-8625.patch","https://curl.haxx.se/docs/adv_20161102K.html","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201701-47","https://www.tenable.com/security/tns-2016-21"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-8625","description":"curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-3537","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-3537","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3537","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3537","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3537","date":"2026-10-08","epss":0.03503,"percentile":0.88852}],"risk":2.189375,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3537","description":"A NULL pointer dereference flaw was found in libxml2, where it did not propagate errors while parsing XML mixed content. This flaw causes the application to crash if an untrusted XML document is parsed in recovery mode and post validated. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3537","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3537","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3537","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3537","date":"2026-10-08","epss":0.03503,"percentile":0.88852}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1956522","https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/","https://security.gentoo.org/glsa/202107-05","https://security.netapp.com/advisory/ntap-20210625-0002/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3537","description":"A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-3537","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-3537","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3537","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3537","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3537","date":"2026-10-08","epss":0.03503,"percentile":0.88852}],"risk":2.189375,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-3537","description":"A NULL pointer dereference flaw was found in libxml2, where it did not propagate errors while parsing XML mixed content. This flaw causes the application to crash if an untrusted XML document is parsed in recovery mode and post validated. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-3537","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-3537","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-3537","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-3537","date":"2026-10-08","epss":0.03503,"percentile":0.88852}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1956522","https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/","https://security.gentoo.org/glsa/202107-05","https://security.netapp.com/advisory/ntap-20210625-0002/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-3537","description":"A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability."}]},{"artifact":{"id":"88816a92e3c9530c","cpes":["cpe:2.3:a:centos:libidn:1.28-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:libidn:libidn:1.28-4.el7:*:*:*:*:*:*:*"],"name":"libidn","purl":"pkg:rpm/centos/libidn@1.28-4.el7?arch=x86_64&distro=centos-7&upstream=libidn-1.28-4.el7.src.rpm","type":"rpm","version":"1.28-4.el7","language":"","licenses":["LGPLv2+ and GPLv3+ and GFDL"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-6262","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libidn","version":"0:1.28-4.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-6262","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-6262","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-6262","date":"2026-10-08","epss":0.06513,"percentile":0.93604}],"risk":2.1818549999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-6262","description":"idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948."},"relatedVulnerabilities":[{"id":"CVE-2016-6262","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-6262","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-6262","date":"2026-10-08","epss":0.06513,"percentile":0.93604}],"urls":["http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=5e3cb9c7b5bf0ce665b9d68f5ddf095af5c9ba60","http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html","http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html","http://www.openwall.com/lists/oss-security/2016/07/20/6","http://www.openwall.com/lists/oss-security/2016/07/21/4","http://www.securityfocus.com/bid/92070","http://www.ubuntu.com/usn/USN-3068-1","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.gnu.org/archive/html/help-libidn/2016-07/msg00009.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-6262","description":"idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-1968","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-1968","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-1968","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-1968","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-1968","date":"2026-10-08","epss":0.04903,"percentile":0.91872}],"risk":2.181835,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-1968","description":"A flaw was found in openssl in versions 1.0.2 to 1.0.2w. A Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The highest threat from this vulnerability is to data confidentiality."},"relatedVulnerabilities":[{"id":"CVE-2020-1968","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-1968","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-1968","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-1968","date":"2026-10-08","epss":0.04903,"percentile":0.91872}],"urls":["https://lists.debian.org/debian-lts-announce/2020/09/msg00016.html","https://security.gentoo.org/glsa/202210-02","https://security.netapp.com/advisory/ntap-20200911-0004/","https://usn.ubuntu.com/4504-1/","https://www.openssl.org/news/secadv/20200909.txt","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2021.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-1968","description":"The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection. The attack can only be exploited if an implementation re-uses a DH secret across multiple TLS connections. Note that this issue only impacts DH ciphersuites and not ECDH ciphersuites. This issue affects OpenSSL 1.0.2 which is out of support and no longer receiving public updates. OpenSSL 1.1.1 is not vulnerable to this issue. Fixed in OpenSSL 1.0.2w (Affected 1.0.2-1.0.2v)."}]},{"artifact":{"id":"a37bd45d74f5547a","cpes":["cpe:2.3:a:libssh2:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:libssh2:1.4.3-10.el7_2.1:*:*:*:*:*:*:*"],"name":"libssh2","purl":"pkg:rpm/centos/libssh2@1.4.3-10.el7_2.1?arch=x86_64&distro=centos-7&upstream=libssh2-1.4.3-10.el7_2.1.src.rpm","type":"rpm","version":"1.4.3-10.el7_2.1","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.8.0-4.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-17498","versionConstraint":"< 0:1.8.0-4.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libssh2","version":"0:1.4.3-10.el7_2.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-17498","fix":{"state":"fixed","versions":["0:1.8.0-4.el7"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:1.8.0-4.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17498","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17498","date":"2026-10-08","epss":0.03762,"percentile":0.89624}],"risk":2.16315,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:3915","link":"https://access.redhat.com/errata/RHSA-2020:3915"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-17498","description":"In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server."},"relatedVulnerabilities":[{"id":"CVE-2019-17498","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":8.1,"impactScore":5.2,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","metrics":{"baseScore":5.8,"impactScore":5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-17498","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-17498","date":"2026-10-08","epss":0.03762,"percentile":0.89624}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00026.html","http://packetstormsecurity.com/files/172835/libssh2-1.9.0-Out-Of-Bounds-Read.html","https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/","https://github.com/kevinbackhouse/SecurityExploits/tree/8cbdbbe6363510f7d9ceec685373da12e6fc752d/libssh2/out_of_bounds_read_disconnect_CVE-2019-17498","https://github.com/libssh2/libssh2/blob/42d37aa63129a1b2644bf6495198923534322d64/src/packet.c#L480","https://github.com/libssh2/libssh2/commit/dedcbd106f8e52d5586b0205bc7677e4c9868f9c","https://lists.debian.org/debian-lts-announce/2019/11/msg00010.html","https://lists.debian.org/debian-lts-announce/2021/12/msg00013.html","https://lists.debian.org/debian-lts-announce/2023/09/msg00006.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22H4Q5XMGS3QNSA7OCL3U7UQZ4NXMR5O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TY7EEE34RFKCTXTMBQQWWSLXZWSCXNDB/","https://security.netapp.com/advisory/ntap-20220909-0004/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-17498","description":"In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.56.1-2.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-12910","versionConstraint":"< 0:2.56.1-2.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-12910","fix":{"state":"fixed","versions":["0:2.56.1-2.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:2.56.1-2.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-12910","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-12910","date":"2026-10-08","epss":0.04188,"percentile":0.90673}],"risk":2.1568199999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3140","link":"https://access.redhat.com/errata/RHSA-2018:3140"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-12910","description":"An out-of-bounds read has been discovered in libsoup when getting cookies from a URI with empty hostname. An attacker may use this flaw to cause a crash in the application."},"relatedVulnerabilities":[{"id":"CVE-2018-12910","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-12910","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-12910","date":"2026-10-08","epss":0.04188,"percentile":0.90673}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00003.html","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3140","https://access.redhat.com/errata/RHSA-2018:3505","https://gitlab.gnome.org/GNOME/gnome-sdk-images/commit/4215b8a21b3b3055e947312a8920df94f93ba047","https://gitlab.gnome.org/GNOME/libsoup/commit/db2b0d5809d5f8226d47312b40992cadbcde439f","https://gitlab.gnome.org/GNOME/libsoup/issues/3","https://lists.debian.org/debian-lts-announce/2018/07/msg00007.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SBREWZ3EEDYWG6PCLWL2EJ24ME5ZFAX6/","https://usn.ubuntu.com/3701-1/","https://www.debian.org/security/2018/dsa-4241"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-12910","description":"The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname."}]},{"artifact":{"id":"920b5d4d13067767","cpes":["cpe:2.3:a:gobject-introspection:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject-introspection:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject_introspection:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject_introspection:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:gobject:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:gobject-introspection:1.50.0-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:gobject_introspection:1.50.0-1.el7:*:*:*:*:*:*:*"],"name":"gobject-introspection","purl":"pkg:rpm/centos/gobject-introspection@1.50.0-1.el7?arch=x86_64&distro=centos-7&upstream=gobject-introspection-1.50.0-1.el7.src.rpm","type":"rpm","version":"1.50.0-1.el7","language":"","licenses":["GPLv2+, LGPLv2+, MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.56.1-1.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-12910","versionConstraint":"< 0:1.56.1-1.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gobject-introspection","version":"0:1.50.0-1.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-12910","fix":{"state":"fixed","versions":["0:1.56.1-1.el7"],"available":[{"date":"2021-11-10","kind":"first-observed","version":"0:1.56.1-1.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-12910","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-12910","date":"2026-10-08","epss":0.04188,"percentile":0.90673}],"risk":2.1568199999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3140","link":"https://access.redhat.com/errata/RHSA-2018:3140"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-12910","description":"An out-of-bounds read has been discovered in libsoup when getting cookies from a URI with empty hostname. An attacker may use this flaw to cause a crash in the application."},"relatedVulnerabilities":[{"id":"CVE-2018-12910","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-12910","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-12910","date":"2026-10-08","epss":0.04188,"percentile":0.90673}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00003.html","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3140","https://access.redhat.com/errata/RHSA-2018:3505","https://gitlab.gnome.org/GNOME/gnome-sdk-images/commit/4215b8a21b3b3055e947312a8920df94f93ba047","https://gitlab.gnome.org/GNOME/libsoup/commit/db2b0d5809d5f8226d47312b40992cadbcde439f","https://gitlab.gnome.org/GNOME/libsoup/issues/3","https://lists.debian.org/debian-lts-announce/2018/07/msg00007.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SBREWZ3EEDYWG6PCLWL2EJ24ME5ZFAX6/","https://usn.ubuntu.com/3701-1/","https://www.debian.org/security/2018/dsa-4241"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-12910","description":"The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-26.P2.el7_9.15"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-3341","versionConstraint":"< 32:9.11.4-26.P2.el7_9.15 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-3341","fix":{"state":"fixed","versions":["32:9.11.4-26.P2.el7_9.15"],"available":[{"date":"2023-10-14","kind":"first-observed","version":"32:9.11.4-26.P2.el7_9.15"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3341","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-3341","cwe":"CWE-1325","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-3341","date":"2026-10-08","epss":0.02854,"percentile":0.86316}],"risk":2.1405,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2023:5691","link":"https://access.redhat.com/errata/RHSA-2023:5691"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-3341","description":"A flaw was found in the Bind package. The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size. Depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing named to terminate unexpectedly."},"relatedVulnerabilities":[{"id":"CVE-2023-3341","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-3341","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-3341","cwe":"CWE-1325","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-3341","date":"2026-10-08","epss":0.02854,"percentile":0.86316}],"urls":["http://www.openwall.com/lists/oss-security/2023/09/20/2","https://kb.isc.org/docs/cve-2023-3341","https://lists.debian.org/debian-lts-announce/2024/01/msg00021.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPJLLTJCSDJJII7IIZPLTBQNWP7MZH7F/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U35OARLQCPMVCBBPHWBXY5M6XJLD2TZ5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSK5V4W4OHPM3JTJGWAQD6CZW7SFD75B/","https://security.netapp.com/advisory/ntap-20231013-0003/","https://www.debian.org/security/2023/dsa-5504"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-3341","description":"The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary.\nThis issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1."}]},{"artifact":{"id":"5e8d763203aed06d","cpes":["cpe:2.3:a:ncurses:ncurses:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:ncurses:5.9-14.20130511.el7_4:*:*:*:*:*:*:*"],"name":"ncurses","purl":"pkg:rpm/centos/ncurses@5.9-14.20130511.el7_4?arch=x86_64&distro=centos-7&upstream=ncurses-5.9-14.20130511.el7_4.src.rpm","type":"rpm","version":"5.9-14.20130511.el7_4","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-10685","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"ncurses","version":"0:5.9-14.20130511.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-10685","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N","metrics":{"baseScore":0,"impactScore":0,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-10685","cwe":"CWE-134","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-10685","date":"2026-10-08","epss":0.04257,"percentile":0.90808}],"risk":2.1285,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-10685","description":"In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack."},"relatedVulnerabilities":[{"id":"CVE-2017-10685","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-10685","cwe":"CWE-134","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-10685","date":"2026-10-08","epss":0.04257,"percentile":0.90808}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1464692","https://security.gentoo.org/glsa/201804-13"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-10685","description":"In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack."}]},{"artifact":{"id":"a418ef820e807d72","cpes":["cpe:2.3:a:ncurses-base:ncurses-base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses-base:ncurses_base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_base:ncurses-base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_base:ncurses_base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses-base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses_base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:ncurses-base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:ncurses_base:5.9-14.20130511.el7_4:*:*:*:*:*:*:*"],"name":"ncurses-base","purl":"pkg:rpm/centos/ncurses-base@5.9-14.20130511.el7_4?arch=noarch&distro=centos-7&upstream=ncurses-5.9-14.20130511.el7_4.src.rpm","type":"rpm","version":"5.9-14.20130511.el7_4","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ncurses","version":"5.9-14.20130511.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-10685","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"ncurses","version":"5.9-14.20130511.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-10685","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N","metrics":{"baseScore":0,"impactScore":0,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-10685","cwe":"CWE-134","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-10685","date":"2026-10-08","epss":0.04257,"percentile":0.90808}],"risk":2.1285,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-10685","description":"In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack."},"relatedVulnerabilities":[{"id":"CVE-2017-10685","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-10685","cwe":"CWE-134","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-10685","date":"2026-10-08","epss":0.04257,"percentile":0.90808}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1464692","https://security.gentoo.org/glsa/201804-13"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-10685","description":"In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack."}]},{"artifact":{"id":"726f67453c05d77f","cpes":["cpe:2.3:a:ncurses-libs:ncurses-libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses-libs:ncurses_libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_libs:ncurses-libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses_libs:ncurses_libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses-libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:ncurses:ncurses_libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:ncurses-libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:ncurses_libs:5.9-14.20130511.el7_4:*:*:*:*:*:*:*"],"name":"ncurses-libs","purl":"pkg:rpm/centos/ncurses-libs@5.9-14.20130511.el7_4?arch=x86_64&distro=centos-7&upstream=ncurses-5.9-14.20130511.el7_4.src.rpm","type":"rpm","version":"5.9-14.20130511.el7_4","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"ncurses","version":"5.9-14.20130511.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-10685","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"ncurses","version":"5.9-14.20130511.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-10685","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N","metrics":{"baseScore":0,"impactScore":0,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-10685","cwe":"CWE-134","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-10685","date":"2026-10-08","epss":0.04257,"percentile":0.90808}],"risk":2.1285,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-10685","description":"In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack."},"relatedVulnerabilities":[{"id":"CVE-2017-10685","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-10685","cwe":"CWE-134","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-10685","date":"2026-10-08","epss":0.04257,"percentile":0.90808}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1464692","https://security.gentoo.org/glsa/201804-13"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-10685","description":"In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack."}]},{"artifact":{"id":"1477c270cf0d5183","cpes":["cpe:2.3:a:libgcrypt:libgcrypt:1.5.3-14.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libgcrypt:1.5.3-14.el7:*:*:*:*:*:*:*"],"name":"libgcrypt","purl":"pkg:rpm/centos/libgcrypt@1.5.3-14.el7?arch=x86_64&distro=centos-7&upstream=libgcrypt-1.5.3-14.el7.src.rpm","type":"rpm","version":"1.5.3-14.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-7526","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libgcrypt","version":"0:1.5.3-14.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-7526","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.1,"impactScore":4,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-7526","cwe":"CWE-200","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2017-7526","cwe":"CWE-310","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-7526","date":"2026-10-08","epss":0.03835,"percentile":0.89832}],"risk":2.1284249999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-7526","description":"libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used."},"relatedVulnerabilities":[{"id":"CVE-2017-7526","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.8,"impactScore":4,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.1,"impactScore":4,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-7526","cwe":"CWE-200","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2017-7526","cwe":"CWE-310","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-7526","date":"2026-10-08","epss":0.03835,"percentile":0.89832}],"urls":["http://www.securityfocus.com/bid/99338","http://www.securitytracker.com/id/1038915","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7526","https://eprint.iacr.org/2017/627","https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=78130828e9a140a9de4dafadbc844dbb64cb709a","https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=8725c99ffa41778f382ca97233183bcd687bb0ce","https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=e6a3dc9900433bbc8ad362a595a3837318c28fa9","https://lists.gnupg.org/pipermail/gnupg-announce/2017q2/000408.html","https://usn.ubuntu.com/3733-1/","https://usn.ubuntu.com/3733-2/","https://www.debian.org/security/2017/dsa-3901","https://www.debian.org/security/2017/dsa-3960"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-7526","description":"libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used."}]},{"artifact":{"id":"3e1db37eda045f3d","cpes":["cpe:2.3:a:coreutils:coreutils:8.22-18.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:coreutils:8.22-18.el7:*:*:*:*:*:*:*"],"name":"coreutils","purl":"pkg:rpm/centos/coreutils@8.22-18.el7?arch=x86_64&distro=centos-7&upstream=coreutils-8.22-18.el7.src.rpm","type":"rpm","version":"8.22-18.el7","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2014-9471","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"coreutils","version":"0:8.22-18.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2014-9471","fix":{"state":"wont-fix","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2014-9471","date":"2026-10-08","epss":0.07087,"percentile":0.94069}],"risk":2.1260999999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2014-9471","description":"The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted date string, as demonstrated by the \"--date=TZ=\"123\"345\" @1\" string to the touch or date command."},"relatedVulnerabilities":[{"id":"CVE-2014-9471","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2014-9471","date":"2026-10-08","epss":0.07087,"percentile":0.94069}],"urls":["http://advisories.mageia.org/MGASA-2015-0029.html","http://debbugs.gnu.org/cgi/bugreport.cgi?bug=16872","http://secunia.com/advisories/62226","http://ubuntu.com/usn/usn-2473-1","http://www.mandriva.com/security/advisories?name=MDVSA-2015:179","http://www.openwall.com/lists/oss-security/2014/11/25/1","http://www.openwall.com/lists/oss-security/2014/11/25/4","http://www.openwall.com/lists/oss-security/2015/01/03/11","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=766147","https://security.gentoo.org/glsa/201612-22"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2014-9471","description":"The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted date string, as demonstrated by the \"--date=TZ=\"123\"345\" @1\" string to the touch or date command."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-9586","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-9586","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9586","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-9586","cwe":"CWE-119","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9586","date":"2026-10-08","epss":0.04746,"percentile":0.91639}],"risk":2.1119700000000003,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-9586","description":"curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks."},"relatedVulnerabilities":[{"id":"CVE-2016-9586","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9586","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-9586","cwe":"CWE-119","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9586","date":"2026-10-08","epss":0.04746,"percentile":0.91639}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/95019","http://www.securitytracker.com/id/1037515","https://access.redhat.com/errata/RHSA-2018:3558","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9586","https://curl.haxx.se/docs/adv_20161221A.html","https://github.com/curl/curl/commit/curl-7_51_0-162-g3ab3c16","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html","https://security.gentoo.org/glsa/201701-47"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-9586","description":"curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-9586","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-9586","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9586","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-9586","cwe":"CWE-119","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9586","date":"2026-10-08","epss":0.04746,"percentile":0.91639}],"risk":2.1119700000000003,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-9586","description":"curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks."},"relatedVulnerabilities":[{"id":"CVE-2016-9586","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9586","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-9586","cwe":"CWE-119","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9586","date":"2026-10-08","epss":0.04746,"percentile":0.91639}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/95019","http://www.securitytracker.com/id/1037515","https://access.redhat.com/errata/RHSA-2018:3558","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9586","https://curl.haxx.se/docs/adv_20161221A.html","https://github.com/curl/curl/commit/curl-7_51_0-162-g3ab3c16","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html","https://security.gentoo.org/glsa/201701-47"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-9586","description":"curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-3358","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-3358","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3358","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3358","date":"2026-10-08","epss":0.0401,"percentile":0.90294}],"risk":2.10525,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-3358","description":"A flaw was found in OpenSSL, where it incorrectly handles legacy custom ciphers passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and EVP_CipherInit_ex2() functions (as well as other similarly named encryption and decryption initialization functions). Instead of using the custom cipher directly, it incorrectly tries to fetch an equivalent cipher from the available providers. An equivalent cipher is found based on the NID passed to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID for a given cipher. However, it is possible for an application to incorrectly pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When NID_undef is used this way, the OpenSSL encryption/decryption initialization function will match the NULL cipher as equivalent and fetch this from the available providers. This is successful if the default provider has been loaded (or if a third-party provider has been loaded that offers this cipher). Using the NULL cipher means that the plaintext is emitted as the ciphertext."},"relatedVulnerabilities":[{"id":"CVE-2022-3358","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-3358","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-3358","date":"2026-10-08","epss":0.0401,"percentile":0.90294}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0023","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20221028-0014/","https://www.openssl.org/news/secadv/20221011.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-3358","description":"OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and EVP_CipherInit_ex2() functions (as well as other similarly named encryption and decryption initialisation functions). Instead of using the custom cipher directly it incorrectly tries to fetch an equivalent cipher from the available providers. An equivalent cipher is found based on the NID passed to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID for a given cipher. However it is possible for an application to incorrectly pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When NID_undef is used in this way the OpenSSL encryption/decryption initialisation function will match the NULL cipher as being equivalent and will fetch this from the available providers. This will succeed if the default provider has been loaded (or if a third party provider has been loaded that offers this cipher). Using the NULL cipher means that the plaintext is emitted as the ciphertext. Applications are only affected by this issue if they call EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to an encryption/decryption initialisation function. Applications that only use SSL/TLS are not impacted by this issue. Fixed in OpenSSL 3.0.6 (Affected 3.0.0-3.0.5)."}]},{"artifact":{"id":"7f68e735316b1f13","cpes":["cpe:2.3:a:p11-kit:p11-kit:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:p11-kit:p11_kit:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:p11_kit:p11-kit:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:p11_kit:p11_kit:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:p11-kit:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:p11_kit:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:p11:p11-kit:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:p11:p11_kit:0.23.5-3.el7:*:*:*:*:*:*:*"],"name":"p11-kit","purl":"pkg:rpm/centos/p11-kit@0.23.5-3.el7?arch=x86_64&distro=centos-7&upstream=p11-kit-0.23.5-3.el7.src.rpm","type":"rpm","version":"0.23.5-3.el7","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-29361","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"p11-kit","version":"0:0.23.5-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-29361","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-29361","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-29361","date":"2026-10-08","epss":0.03363,"percentile":0.88395}],"risk":2.1018749999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-29361","description":"An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc."},"relatedVulnerabilities":[{"id":"CVE-2020-29361","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-29361","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-29361","date":"2026-10-08","epss":0.03363,"percentile":0.88395}],"urls":["https://github.com/p11-glue/p11-kit/releases","https://github.com/p11-glue/p11-kit/security/advisories/GHSA-q4r3-hm6m-mvc2","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/01/msg00002.html","https://www.debian.org/security/2021/dsa-4822"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-29361","description":"An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc."}]},{"artifact":{"id":"8fbc3856d5e044fa","cpes":["cpe:2.3:a:p11-kit-trust:p11-kit-trust:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:p11-kit-trust:p11_kit_trust:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:p11_kit_trust:p11-kit-trust:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:p11_kit_trust:p11_kit_trust:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:p11-kit:p11-kit-trust:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:p11-kit:p11_kit_trust:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:p11_kit:p11-kit-trust:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:p11_kit:p11_kit_trust:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:p11-kit-trust:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:p11_kit_trust:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:p11:p11-kit-trust:0.23.5-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:p11:p11_kit_trust:0.23.5-3.el7:*:*:*:*:*:*:*"],"name":"p11-kit-trust","purl":"pkg:rpm/centos/p11-kit-trust@0.23.5-3.el7?arch=x86_64&distro=centos-7&upstream=p11-kit-0.23.5-3.el7.src.rpm","type":"rpm","version":"0.23.5-3.el7","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"p11-kit","version":"0.23.5-3.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-29361","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"p11-kit","version":"0.23.5-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-29361","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-29361","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-29361","date":"2026-10-08","epss":0.03363,"percentile":0.88395}],"risk":2.1018749999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-29361","description":"An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc."},"relatedVulnerabilities":[{"id":"CVE-2020-29361","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-29361","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-29361","date":"2026-10-08","epss":0.03363,"percentile":0.88395}],"urls":["https://github.com/p11-glue/p11-kit/releases","https://github.com/p11-glue/p11-kit/security/advisories/GHSA-q4r3-hm6m-mvc2","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2021/01/msg00002.html","https://www.debian.org/security/2021/dsa-4822"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-29361","description":"An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-14404","versionConstraint":"< 0:2.9.1-6.el7.4 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-14404","fix":{"state":"fixed","versions":["0:2.9.1-6.el7.4"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.9.1-6.el7.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-14404","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-14404","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-14404","date":"2026-10-08","epss":0.0365,"percentile":0.89299}],"risk":2.0987499999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1190","link":"https://access.redhat.com/errata/RHSA-2020:1190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-14404","description":"A null pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 when parsing invalid XPath expression. Applications processing untrusted XSL format inputs with the use of libxml2 library may be vulnerable to denial of service attack due to crash of the application."},"relatedVulnerabilities":[{"id":"CVE-2018-14404","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-14404","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-14404","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-14404","date":"2026-10-08","epss":0.0365,"percentile":0.89299}],"urls":["https://access.redhat.com/errata/RHSA-2019:1543","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901817","https://bugzilla.redhat.com/show_bug.cgi?id=1595985","https://gitlab.gnome.org/GNOME/libxml2/issues/10","https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html","https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html","https://security.netapp.com/advisory/ntap-20190719-0002/","https://usn.ubuntu.com/3739-1/","https://usn.ubuntu.com/3739-2/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-14404","description":"A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-14404","versionConstraint":"< 0:2.9.1-6.el7.4 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-14404","fix":{"state":"fixed","versions":["0:2.9.1-6.el7.4"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.9.1-6.el7.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-14404","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-14404","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-14404","date":"2026-10-08","epss":0.0365,"percentile":0.89299}],"risk":2.0987499999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1190","link":"https://access.redhat.com/errata/RHSA-2020:1190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-14404","description":"A null pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 when parsing invalid XPath expression. Applications processing untrusted XSL format inputs with the use of libxml2 library may be vulnerable to denial of service attack due to crash of the application."},"relatedVulnerabilities":[{"id":"CVE-2018-14404","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-14404","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-14404","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-14404","date":"2026-10-08","epss":0.0365,"percentile":0.89299}],"urls":["https://access.redhat.com/errata/RHSA-2019:1543","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901817","https://bugzilla.redhat.com/show_bug.cgi?id=1595985","https://gitlab.gnome.org/GNOME/libxml2/issues/10","https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html","https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html","https://security.netapp.com/advisory/ntap-20190719-0002/","https://usn.ubuntu.com/3739-1/","https://usn.ubuntu.com/3739-2/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-14404","description":"A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application."}]},{"artifact":{"id":"ba41c515194cebe5","cpes":["cpe:2.3:a:python-requests:python-requests:2.6.0-1.el7_1:*:*:*:*:*:*:*","cpe:2.3:a:python-requests:python_requests:2.6.0-1.el7_1:*:*:*:*:*:*:*","cpe:2.3:a:python_requests:python-requests:2.6.0-1.el7_1:*:*:*:*:*:*:*","cpe:2.3:a:python_requests:python_requests:2.6.0-1.el7_1:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-requests:2.6.0-1.el7_1:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_requests:2.6.0-1.el7_1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-requests:2.6.0-1.el7_1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_requests:2.6.0-1.el7_1:*:*:*:*:*:*:*"],"name":"python-requests","purl":"pkg:rpm/centos/python-requests@2.6.0-1.el7_1?arch=noarch&distro=centos-7&upstream=python-requests-2.6.0-1.el7_1.src.rpm","type":"rpm","version":"2.6.0-1.el7_1","language":"","licenses":["ASL 2.0"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.6.0-5.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-18074","versionConstraint":"< 0:2.6.0-5.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python-requests","version":"0:2.6.0-1.el7_1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-18074","fix":{"state":"fixed","versions":["0:2.6.0-5.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.6.0-5.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-18074","cwe":"CWE-522","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-18074","date":"2026-10-08","epss":0.07443,"percentile":0.94307}],"risk":2.0840400000000003,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2035","link":"https://access.redhat.com/errata/RHSA-2019:2035"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-18074","description":"A credentials-exposure flaw was found in python-requests, where if a request with authentication is redirected (302) from an HTTPS endpoint to an HTTP endpoint on the same host, the Authorization header is not stripped and the credentials can be read in plain text. A man-in-the-middle attacker could exploit this flaw to obtain a user's valid credentials."},"relatedVulnerabilities":[{"id":"CVE-2018-18074","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-18074","cwe":"CWE-522","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-18074","date":"2026-10-08","epss":0.07443,"percentile":0.94307}],"urls":["http://docs.python-requests.org/en/master/community/updates/#release-and-version-history","http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00024.html","https://access.redhat.com/errata/RHSA-2019:2035","https://bugs.debian.org/910766","https://github.com/requests/requests/commit/c45d7c49ea75133e52ab22a8e9e13173938e36ff","https://github.com/requests/requests/issues/4716","https://github.com/requests/requests/pull/4718","https://usn.ubuntu.com/3790-1/","https://usn.ubuntu.com/3790-2/","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-18074","description":"The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network."}]},{"artifact":{"id":"8a7d97338866cd1c","cpes":["cpe:2.3:a:binutils:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:rpm/centos/binutils@2.25.1-32.base.el7_4.1?arch=x86_64&distro=centos-7&upstream=binutils-2.25.1-32.base.el7_4.1.src.rpm","type":"rpm","version":"2.25.1-32.base.el7_4.1","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-12698","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"binutils","version":"0:2.25.1-32.base.el7_4.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-12698","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12698","date":"2026-10-08","epss":0.06606,"percentile":0.93683}],"risk":2.0808899999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-12698","description":"demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the \"Create an array for saving the template argument values\" XNEWVEC call. This can occur during execution of objdump."},"relatedVulnerabilities":[{"id":"CVE-2018-12698","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2018-12698","date":"2026-10-08","epss":0.06606,"percentile":0.93683}],"urls":["http://www.securityfocus.com/bid/104539","https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763102","https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454","https://security.gentoo.org/glsa/201908-01","https://sourceware.org/bugzilla/show_bug.cgi?id=23057","https://usn.ubuntu.com/4326-1/","https://usn.ubuntu.com/4336-1/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-12698","description":"demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the \"Create an array for saving the template argument values\" XNEWVEC call. This can occur during execution of objdump."}]},{"artifact":{"id":"eb19ef3f4eddf549","cpes":["cpe:2.3:a:centos:gmp:1\\:6.0.0-15.el7:*:*:*:*:*:*:*","cpe:2.3:a:gmp:gmp:1\\:6.0.0-15.el7:*:*:*:*:*:*:*"],"name":"gmp","purl":"pkg:rpm/centos/gmp@6.0.0-15.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=gmp-6.0.0-15.el7.src.rpm","type":"rpm","version":"1:6.0.0-15.el7","language":"","licenses":["LGPLv3+ or GPLv2+"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-43618","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gmp","version":"1:6.0.0-15.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-43618","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-43618","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-43618","date":"2026-10-08","epss":0.03712,"percentile":0.89469}],"risk":2.07872,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-43618","description":"A flaw was found in gmp. An integer overflow vulnerability could allow an attacker to input an integer value leading to a crash. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2021-43618","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-43618","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-43618","date":"2026-10-08","epss":0.03712,"percentile":0.89469}],"urls":["http://seclists.org/fulldisclosure/2022/Oct/8","http://www.openwall.com/lists/oss-security/2022/10/13/3","https://bugs.debian.org/994405","https://gmplib.org/list-archives/gmp-bugs/2021-September/005077.html","https://gmplib.org/repo/gmp-6.2/rev/561a9c25298e","https://lists.debian.org/debian-lts-announce/2021/12/msg00001.html","https://security.gentoo.org/glsa/202309-13","https://security.netapp.com/advisory/ntap-20221111-0001/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-43618","description":"GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms."}]},{"artifact":{"id":"105c3f3269638a7a","cpes":["cpe:2.3:a:krb5-libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5-libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*"],"name":"krb5-libs","purl":"pkg:rpm/centos/krb5-libs@1.15.1-8.el7?arch=x86_64&distro=centos-7&upstream=krb5-1.15.1-8.el7.src.rpm","type":"rpm","version":"1.15.1-8.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"krb5","version":"1.15.1-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2015-2697","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"krb5","version":"1.15.1-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-2697","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-2697","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-2697","date":"2026-10-08","epss":0.04128,"percentile":0.90553}],"risk":2.064,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-2697","description":"An out-of-bounds flaw was discovered in MIT Kerberos; the build_principal_va() function did not properly duplicate the realm. An authenticated remote attacker could possibly exploit this flaw by sending a TGS request containing a specially crafted realm field and crashing the KDC (denial of service)."},"relatedVulnerabilities":[{"id":"CVE-2015-2697","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-2697","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-2697","date":"2026-10-08","epss":0.04128,"percentile":0.90553}],"urls":["http://krbdev.mit.edu/rt/Ticket/Display.html?id=8252","http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00006.html","http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00014.html","http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00022.html","http://www.debian.org/security/2015/dsa-3395","http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","http://www.securityfocus.com/bid/77581","http://www.securitytracker.com/id/1034084","http://www.ubuntu.com/usn/USN-2810-1","https://github.com/krb5/krb5/commit/f0c094a1b745d91ef2f9a4eae2149aac026a5789","https://security.gentoo.org/glsa/201611-14"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-2697","description":"The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1.14 allows remote authenticated users to cause a denial of service (out-of-bounds read and KDC crash) via an initial '\\0' character in a long realm field within a TGS request."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-8386","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8386","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-8386","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8386","date":"2026-10-08","epss":0.0687,"percentile":0.93893}],"risk":2.061,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8386","description":"PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."},"relatedVulnerabilities":[{"id":"CVE-2015-8386","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8386","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8386","date":"2026-10-08","epss":0.0687,"percentile":0.93893}],"urls":["http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html","http://rhn.redhat.com/errata/RHSA-2016-1025.html","http://rhn.redhat.com/errata/RHSA-2016-2750.html","http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup","http://www-01.ibm.com/support/docview.wss?uid=isg3T1023886","http://www.openwall.com/lists/oss-security/2015/11/29/1","http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html","http://www.securityfocus.com/bid/82990","https://access.redhat.com/errata/RHSA-2016:1132","https://bto.bluecoat.com/security-advisory/sa128","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731","https://security.gentoo.org/glsa/201607-02","https://security.netapp.com/advisory/ntap-20230216-0002/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8386","description":"PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-2327","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-2327","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-2327","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-2327","date":"2026-10-08","epss":0.04049,"percentile":0.90371}],"risk":2.0244999999999997,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-2327","description":"PCRE before 8.36 mishandles the /(((a\\2)|(a*)\\g<-1>))*/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."},"relatedVulnerabilities":[{"id":"CVE-2015-2327","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-2327","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-2327","date":"2026-10-08","epss":0.04049,"percentile":0.90371}],"urls":["http://rhn.redhat.com/errata/RHSA-2016-2750.html","http://vcs.pcre.org/pcre/code/trunk/ChangeLog?view=markup","http://www.fortiguard.com/advisory/FG-VD-15-010/","http://www.openwall.com/lists/oss-security/2015/11/29/1","http://www.securityfocus.com/bid/74924","https://bugs.exim.org/show_bug.cgi?id=1503","https://jira.mongodb.org/browse/SERVER-17252"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-2327","description":"PCRE before 8.36 mishandles the /(((a\\2)|(a*)\\g<-1>))*/ pattern and related patterns with certain internal recursive back references, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror."}]},{"artifact":{"id":"4e4067da03756568","cpes":["cpe:2.3:a:centos:libgcc:4.8.5-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc:4.8.5-16.el7:*:*:*:*:*:*:*"],"name":"libgcc","purl":"pkg:rpm/centos/libgcc@4.8.5-16.el7?arch=x86_64&distro=centos-7&upstream=gcc-4.8.5-16.el7.src.rpm","type":"rpm","version":"4.8.5-16.el7","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"4.8.5-16.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-24553","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gcc","version":"4.8.5-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-24553","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-24553","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-24553","date":"2026-10-08","epss":0.03646,"percentile":0.89288}],"risk":2.0235299999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-24553","description":"A flaw was found in the Go standard library packages before upstream versions 1.15 and 1.14.8. Both the net/http/cgi and net/http/fcgi packages use a default Content-Type response header value of \"text/html\", rather than \"text/plain\". This flaw allows an attacker to exploit this issue in applications using these packages by uploading crafted files, allowing a Cross-site Scripting attack (XSS). The highest threat from this vulnerability is to confidentiality and integrity."},"relatedVulnerabilities":[{"id":"CVE-2020-24553","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-24553","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-24553","date":"2026-10-08","epss":0.03646,"percentile":0.89288}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00002.html","http://packetstormsecurity.com/files/159049/Go-CGI-FastCGI-Transport-Cross-Site-Scripting.html","http://seclists.org/fulldisclosure/2020/Sep/5","https://groups.google.com/forum/#%21topic/golang-announce/8wqlSbkLdPs","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZBO7Q73GGWBVYIKNH2HNN44Q5IQND5W/","https://security.netapp.com/advisory/ntap-20200924-0003/","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.redteam-pentesting.de/advisories/rt-sa-2020-004"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-24553","description":"Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header."}]},{"artifact":{"id":"4a236f6ff2195b8a","cpes":["cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+:4.8.5-16.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libstdc\\+\\+:4.8.5-16.el7:*:*:*:*:*:*:*"],"name":"libstdc++","purl":"pkg:rpm/centos/libstdc%2B%2B@4.8.5-16.el7?arch=x86_64&distro=centos-7&upstream=gcc-4.8.5-16.el7.src.rpm","type":"rpm","version":"4.8.5-16.el7","language":"","licenses":["GPLv3+ and GPLv3+ with exceptions and GPLv2+ with exceptions and LGPLv2+ and BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"gcc","version":"4.8.5-16.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-24553","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gcc","version":"4.8.5-16.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-24553","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-24553","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-24553","date":"2026-10-08","epss":0.03646,"percentile":0.89288}],"risk":2.0235299999999996,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-24553","description":"A flaw was found in the Go standard library packages before upstream versions 1.15 and 1.14.8. Both the net/http/cgi and net/http/fcgi packages use a default Content-Type response header value of \"text/html\", rather than \"text/plain\". This flaw allows an attacker to exploit this issue in applications using these packages by uploading crafted files, allowing a Cross-site Scripting attack (XSS). The highest threat from this vulnerability is to confidentiality and integrity."},"relatedVulnerabilities":[{"id":"CVE-2020-24553","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-24553","cwe":"CWE-79","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-24553","date":"2026-10-08","epss":0.03646,"percentile":0.89288}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00000.html","http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00002.html","http://packetstormsecurity.com/files/159049/Go-CGI-FastCGI-Transport-Cross-Site-Scripting.html","http://seclists.org/fulldisclosure/2020/Sep/5","https://groups.google.com/forum/#%21topic/golang-announce/8wqlSbkLdPs","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZBO7Q73GGWBVYIKNH2HNN44Q5IQND5W/","https://security.netapp.com/advisory/ntap-20200924-0003/","https://www.oracle.com//security-alerts/cpujul2021.html","https://www.oracle.com/security-alerts/cpuApr2021.html","https://www.redteam-pentesting.de/advisories/rt-sa-2020-004"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-24553","description":"Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-18348","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-18348","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-18348","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-18348","cwe":"CWE-74","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-18348","date":"2026-10-08","epss":0.03513,"percentile":0.88887}],"risk":2.019975,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-18348","description":"A CRLF injection flaw was discovered in python in the way URLs are handled when doing an HTTP/HTTPS connection (e.g. through urlopen() or HTTPConnection). An attacker who can control the url parameter passed to urlopen method in the urllib/urllib2 modules can inject CRLF sequences and HTTP headers by abusing the \"host\" part of the URL."},"relatedVulnerabilities":[{"id":"CVE-2019-18348","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-18348","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-18348","cwe":"CWE-74","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-18348","date":"2026-10-08","epss":0.03513,"percentile":0.88887}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.html","https://bugs.python.org/issue30458#msg347282","https://bugzilla.redhat.com/show_bug.cgi?id=1727276","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5NSAX4SC3V64PGZUPH7PRDLSON34Q5A/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UESGYI5XDAHJBATEZN3MHNDUBDH47AS6/","https://security.netapp.com/advisory/ntap-20191107-0004/","https://usn.ubuntu.com/4333-1/","https://usn.ubuntu.com/4333-2/","https://www.oracle.com/security-alerts/cpuoct2020.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-18348","description":"An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the host component of a URL) followed by an HTTP header. This is similar to the CVE-2019-9740 query string issue and the CVE-2019-9947 path string issue. (This is not exploitable when glibc has CVE-2016-10739 fixed.). This is fixed in: v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1; v3.6.11, v3.6.11rc1, v3.6.12; v3.7.8, v3.7.8rc1, v3.7.9; v3.8.3, v3.8.3rc1, v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-18348","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-18348","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-18348","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-18348","cwe":"CWE-74","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-18348","date":"2026-10-08","epss":0.03513,"percentile":0.88887}],"risk":2.019975,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-18348","description":"A CRLF injection flaw was discovered in python in the way URLs are handled when doing an HTTP/HTTPS connection (e.g. through urlopen() or HTTPConnection). An attacker who can control the url parameter passed to urlopen method in the urllib/urllib2 modules can inject CRLF sequences and HTTP headers by abusing the \"host\" part of the URL."},"relatedVulnerabilities":[{"id":"CVE-2019-18348","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-18348","cwe":"CWE-74","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-18348","cwe":"CWE-74","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-18348","date":"2026-10-08","epss":0.03513,"percentile":0.88887}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.html","https://bugs.python.org/issue30458#msg347282","https://bugzilla.redhat.com/show_bug.cgi?id=1727276","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5NSAX4SC3V64PGZUPH7PRDLSON34Q5A/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UESGYI5XDAHJBATEZN3MHNDUBDH47AS6/","https://security.netapp.com/advisory/ntap-20191107-0004/","https://usn.ubuntu.com/4333-1/","https://usn.ubuntu.com/4333-2/","https://www.oracle.com/security-alerts/cpuoct2020.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-18348","description":"An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the host component of a URL) followed by an HTTP header. This is similar to the CVE-2019-9740 query string issue and the CVE-2019-9947 path string issue. (This is not exploitable when glibc has CVE-2016-10739 fixed.). This is fixed in: v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1; v3.6.11, v3.6.11rc1, v3.6.12; v3.7.8, v3.7.8rc1, v3.7.9; v3.8.3, v3.8.3rc1, v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-8621","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-8621","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8621","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8621","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8621","date":"2026-10-08","epss":0.04864,"percentile":0.91815}],"risk":2.0185600000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-8621","description":"The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short."},"relatedVulnerabilities":[{"id":"CVE-2016-8621","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8621","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8621","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8621","date":"2026-10-08","epss":0.04864,"percentile":0.91815}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/94101","http://www.securitytracker.com/id/1037192","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8621","https://curl.haxx.se/CVE-2016-8621.patch","https://curl.haxx.se/docs/adv_20161102G.html","https://security.gentoo.org/glsa/201701-47","https://www.tenable.com/security/tns-2016-21"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-8621","description":"The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-8621","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-8621","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8621","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8621","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8621","date":"2026-10-08","epss":0.04864,"percentile":0.91815}],"risk":2.0185600000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-8621","description":"The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short."},"relatedVulnerabilities":[{"id":"CVE-2016-8621","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-8621","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2016-8621","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-8621","date":"2026-10-08","epss":0.04864,"percentile":0.91815}],"urls":["http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","http://www.securityfocus.com/bid/94101","http://www.securitytracker.com/id/1037192","https://access.redhat.com/errata/RHSA-2018:2486","https://access.redhat.com/errata/RHSA-2018:3558","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8621","https://curl.haxx.se/CVE-2016-8621.patch","https://curl.haxx.se/docs/adv_20161102G.html","https://security.gentoo.org/glsa/201701-47","https://www.tenable.com/security/tns-2016-21"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-8621","description":"The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short."}]},{"artifact":{"id":"a0e968f0d5303df3","cpes":["cpe:2.3:a:centos:cpio:2.11-25.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:cpio:cpio:2.11-25.el7_4:*:*:*:*:*:*:*"],"name":"cpio","purl":"pkg:rpm/centos/cpio@2.11-25.el7_4?arch=x86_64&distro=centos-7&upstream=cpio-2.11-25.el7_4.src.rpm","type":"rpm","version":"2.11-25.el7_4","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-2037","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"cpio","version":"0:2.11-25.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-2037","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2037","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-2037","date":"2026-10-08","epss":0.05484,"percentile":0.92563}],"risk":2.0016599999999998,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-2037","description":"The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file."},"relatedVulnerabilities":[{"id":"CVE-2016-2037","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2037","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-2037","date":"2026-10-08","epss":0.05484,"percentile":0.92563}],"urls":["http://www.debian.org/security/2016/dsa-3483","http://www.openwall.com/lists/oss-security/2016/01/19/4","http://www.openwall.com/lists/oss-security/2016/01/22/4","http://www.securityfocus.com/bid/82293","http://www.securitytracker.com/id/1035067","http://www.ubuntu.com/usn/USN-2906-1"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2037","description":"The cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted cpio file."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-9.P2.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-5741","versionConstraint":"< 32:9.11.4-9.P2.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-5741","fix":{"state":"fixed","versions":["32:9.11.4-9.P2.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"32:9.11.4-9.P2.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-5741","cwe":"CWE-863","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-5741","date":"2026-10-08","epss":0.03479,"percentile":0.8878}],"risk":2.000425,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:2057","link":"https://access.redhat.com/errata/RHSA-2019:2057"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-5741","description":"To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update request. Unfortunately, some rule types were not initially documented, and when documentation for them was added to the Administrator Reference Manual (ARM) in change #3112, the language that was added to the ARM at that time incorrectly described the behavior of two rule types, krb5-subdomain and ms-subdomain. This incorrect documentation could mislead operators into believing that policies they had configured were more restrictive than they actually were. This affects BIND versions prior to BIND 9.11.5 and BIND 9.12.3."},"relatedVulnerabilities":[{"id":"CVE-2018-5741","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-5741","cwe":"CWE-863","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-5741","date":"2026-10-08","epss":0.03479,"percentile":0.8878}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html","http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html","http://www.securityfocus.com/bid/105379","http://www.securitytracker.com/id/1041674","https://access.redhat.com/errata/RHSA-2019:2057","https://kb.isc.org/docs/cve-2018-5741","https://security.gentoo.org/glsa/201903-13","https://security.netapp.com/advisory/ntap-20190830-0001/","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03927en_us"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-5741","description":"To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update request. Unfortunately, some rule types were not initially documented, and when documentation for them was added to the Administrator Reference Manual (ARM) in change #3112, the language that was added to the ARM at that time incorrectly described the behavior of two rule types, krb5-subdomain and ms-subdomain. This incorrect documentation could mislead operators into believing that policies they had configured were more restrictive than they actually were. This affects BIND versions prior to BIND 9.11.5 and BIND 9.12.3."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-38546","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-38546","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-38546","date":"2026-10-08","epss":0.05956,"percentile":0.931}],"risk":1.9952599999999998,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-38546","description":"A flaw was found in the Curl package. This flaw allows an attacker to insert cookies into a running program using libcurl if the specific series of conditions are met."},"relatedVulnerabilities":[{"id":"CVE-2023-38546","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-38546","date":"2026-10-08","epss":0.05956,"percentile":0.931}],"urls":["http://seclists.org/fulldisclosure/2024/Jan/34","http://seclists.org/fulldisclosure/2024/Jan/37","http://seclists.org/fulldisclosure/2024/Jan/38","https://curl.se/docs/CVE-2023-38546.html","https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/","https://support.apple.com/kb/HT214036","https://support.apple.com/kb/HT214057","https://support.apple.com/kb/HT214058","https://support.apple.com/kb/HT214063","https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-943925.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-38546","description":"This flaw allows an attacker to insert cookies at will into a running program\nusing libcurl, if the specific series of conditions are met.\n\nlibcurl performs transfers. In its API, an application creates \"easy handles\"\nthat are the individual handles for single transfers.\n\nlibcurl provides a function call that duplicates en easy handle called\n[curl_easy_duphandle](https://curl.se/libcurl/c/curl_easy_duphandle.html).\n\nIf a transfer has cookies enabled when the handle is duplicated, the\ncookie-enable state is also cloned - but without cloning the actual\ncookies. If the source handle did not read any cookies from a specific file on\ndisk, the cloned version of the handle would instead store the file name as\n`none` (using the four ASCII letters, no quotes).\n\nSubsequent use of the cloned handle that does not explicitly set a source to\nload cookies from would then inadvertently load cookies from a file named\n`none` - if such a file exists and is readable in the current directory of the\nprogram using libcurl. And if using the correct file format of course."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-38546","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-38546","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-38546","date":"2026-10-08","epss":0.05956,"percentile":0.931}],"risk":1.9952599999999998,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-38546","description":"A flaw was found in the Curl package. This flaw allows an attacker to insert cookies into a running program using libcurl if the specific series of conditions are met."},"relatedVulnerabilities":[{"id":"CVE-2023-38546","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2023-38546","date":"2026-10-08","epss":0.05956,"percentile":0.931}],"urls":["http://seclists.org/fulldisclosure/2024/Jan/34","http://seclists.org/fulldisclosure/2024/Jan/37","http://seclists.org/fulldisclosure/2024/Jan/38","https://curl.se/docs/CVE-2023-38546.html","https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/","https://support.apple.com/kb/HT214036","https://support.apple.com/kb/HT214057","https://support.apple.com/kb/HT214058","https://support.apple.com/kb/HT214063","https://lists.debian.org/debian-lts-announce/2023/10/msg00016.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-832273.html","https://cert-portal.siemens.com/productcert/html/ssa-943925.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-38546","description":"This flaw allows an attacker to insert cookies at will into a running program\nusing libcurl, if the specific series of conditions are met.\n\nlibcurl performs transfers. In its API, an application creates \"easy handles\"\nthat are the individual handles for single transfers.\n\nlibcurl provides a function call that duplicates en easy handle called\n[curl_easy_duphandle](https://curl.se/libcurl/c/curl_easy_duphandle.html).\n\nIf a transfer has cookies enabled when the handle is duplicated, the\ncookie-enable state is also cloned - but without cloning the actual\ncookies. If the source handle did not read any cookies from a specific file on\ndisk, the cloned version of the handle would instead store the file name as\n`none` (using the four ASCII letters, no quotes).\n\nSubsequent use of the cloned handle that does not explicitly set a source to\nload cookies from would then inadvertently load cookies from a file named\n`none` - if such a file exists and is readable in the current directory of the\nprogram using libcurl. And if using the correct file format of course."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-9047","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9047","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9047","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9047","date":"2026-10-08","epss":0.03185,"percentile":0.87696}],"risk":1.990625,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9047","description":"A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits) whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about \"size\" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash."},"relatedVulnerabilities":[{"id":"CVE-2017-9047","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9047","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9047","date":"2026-10-08","epss":0.03185,"percentile":0.87696}],"urls":["http://www.debian.org/security/2017/dsa-3952","http://www.openwall.com/lists/oss-security/2017/05/15/1","http://www.securityfocus.com/bid/98599","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201711-01"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9047","description":"A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits) whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about \"size\" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-9047","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9047","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9047","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9047","date":"2026-10-08","epss":0.03185,"percentile":0.87696}],"risk":1.990625,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9047","description":"A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits) whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about \"size\" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash."},"relatedVulnerabilities":[{"id":"CVE-2017-9047","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9047","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9047","date":"2026-10-08","epss":0.03185,"percentile":0.87696}],"urls":["http://www.debian.org/security/2017/dsa-3952","http://www.openwall.com/lists/oss-security/2017/05/15/1","http://www.securityfocus.com/bid/98599","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201711-01"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9047","description":"A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable len is assigned strlen(buf). If the content->type is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content->prefix is appended to buf (if it actually fits) whereupon (ii) content->name is written to the buffer. However, the check for whether the content->name actually fits also uses 'len' rather than the updated buffer length strlen(buf). This allows us to write about \"size\" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-26.P2.el7_9.13"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-25220","versionConstraint":"< 32:9.11.4-26.P2.el7_9.13 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-25220","fix":{"state":"fixed","versions":["32:9.11.4-26.P2.el7_9.13"],"available":[{"date":"2023-01-25","kind":"first-observed","version":"32:9.11.4-26.P2.el7_9.13"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-25220","cwe":"CWE-444","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-25220","date":"2026-10-08","epss":0.03357,"percentile":0.88377}],"risk":1.98063,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2023:0402","link":"https://access.redhat.com/errata/RHSA-2023:0402"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-25220","description":"A cache poisoning vulnerability was found in BIND when using forwarders. Bogus NS records supplied by the forwarders may be cached and used by name if it needs to recurse for any reason. This issue causes it to obtain and pass on potentially incorrect answers. This flaw allows a remote high privileged attacker to manipulate cache results with incorrect records, leading to queries made to the wrong servers, possibly resulting in false information received on the client's end."},"relatedVulnerabilities":[{"id":"CVE-2021-25220","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-25220","cwe":"CWE-444","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-25220","date":"2026-10-08","epss":0.03357,"percentile":0.88377}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","https://kb.isc.org/v1/docs/cve-2021-25220","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2SXT7247QTKNBQ67MNRGZD23ADXU6E5U/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5VX3I2U3ICOIEI5Y7OYA6CHOLFMNH3YQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/API7U5E7SX7BAAVFNW366FFJGD6NZZKV/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DE3UAVCPUMAKG27ZL5YXSP2C3RIOW3JZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYD7US4HZRFUGAJ66ZTHFBYVP5N3OQBY/","https://security.gentoo.org/glsa/202210-25","https://security.netapp.com/advisory/ntap-20220408-0001/","https://supportportal.juniper.net/s/article/2022-10-Security-Bulletin-Junos-OS-SRX-Series-Cache-poisoning-vulnerability-in-BIND-used-by-DNS-Proxy-CVE-2021-25220?language=en_US"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-25220","description":"BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-9674","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-9674","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.2,"impactScore":3.6,"exploitabilityScore":0.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9674","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-9674","date":"2026-10-08","epss":0.0549,"percentile":0.92572}],"risk":1.9763999999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-9674","description":"A ZIP bomb attack was found in the Python zipfile module. A remote attacker could abuse this flaw by providing a specially crafted ZIP file that, when decompressed by zipfile, would exhaust system resources resulting in a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2019-9674","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9674","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-9674","date":"2026-10-08","epss":0.0549,"percentile":0.92572}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00003.html","http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.html","https://bugs.python.org/issue36260","https://bugs.python.org/issue36462","https://github.com/python/cpython/blob/master/Lib/zipfile.py","https://python-security.readthedocs.io/security.html#archives-and-zip-bomb","https://security.netapp.com/advisory/ntap-20200221-0003/","https://usn.ubuntu.com/4428-1/","https://www.python.org/news/security/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-9674","description":"Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-9674","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-9674","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.2,"impactScore":3.6,"exploitabilityScore":0.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9674","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-9674","date":"2026-10-08","epss":0.0549,"percentile":0.92572}],"risk":1.9763999999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-9674","description":"A ZIP bomb attack was found in the Python zipfile module. A remote attacker could abuse this flaw by providing a specially crafted ZIP file that, when decompressed by zipfile, would exhaust system resources resulting in a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2019-9674","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-9674","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-9674","date":"2026-10-08","epss":0.0549,"percentile":0.92572}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00003.html","http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.html","https://bugs.python.org/issue36260","https://bugs.python.org/issue36462","https://github.com/python/cpython/blob/master/Lib/zipfile.py","https://python-security.readthedocs.io/security.html#archives-and-zip-bomb","https://security.netapp.com/advisory/ntap-20200221-0003/","https://usn.ubuntu.com/4428-1/","https://www.python.org/news/security/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-9674","description":"Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-13057","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-13057","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-13057","date":"2026-10-08","epss":0.03423,"percentile":0.88581}],"risk":1.9682249999999994,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-13057","description":"An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)"},"relatedVulnerabilities":[{"id":"CVE-2019-13057","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","metrics":{"baseScore":3.5,"impactScore":2.9,"exploitabilityScore":6.9},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-13057","date":"2026-10-08","epss":0.03423,"percentile":0.88581}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html","http://seclists.org/fulldisclosure/2019/Dec/26","https://kc.mcafee.com/corporate/index?page=content&id=SB10365","https://lists.debian.org/debian-lts-announce/2019/08/msg00024.html","https://seclists.org/bugtraq/2019/Dec/23","https://security.netapp.com/advisory/ntap-20190822-0004/","https://support.apple.com/kb/HT210788","https://usn.ubuntu.com/4078-1/","https://usn.ubuntu.com/4078-2/","https://www.openldap.org/its/?findid=9038","https://www.openldap.org/lists/openldap-announce/201907/msg00001.html","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-13057","description":"An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)"}]},{"artifact":{"id":"8a7d97338866cd1c","cpes":["cpe:2.3:a:binutils:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:rpm/centos/binutils@2.25.1-32.base.el7_4.1?arch=x86_64&distro=centos-7&upstream=binutils-2.25.1-32.base.el7_4.1.src.rpm","type":"rpm","version":"2.25.1-32.base.el7_4.1","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-20294","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"binutils","version":"0:2.25.1-32.base.el7_4.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-20294","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-20294","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-20294","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-20294","date":"2026-10-08","epss":0.03278,"percentile":0.88085}],"risk":1.9667999999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-20294","description":"A flaw was found in binutils' readelf program. An attacker who is able to convince a victim using readelf to read a crafted file, could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality, integrity, and availability."},"relatedVulnerabilities":[{"id":"CVE-2021-20294","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-20294","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2021-20294","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-20294","date":"2026-10-08","epss":0.03278,"percentile":0.88085}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1943533","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/202208-30","https://sourceware.org/bugzilla/show_bug.cgi?id=26929","https://sourceware.org/git/?p=binutils-gdb.git%3Ba=patch%3Bh=372dd157272e0674d13372655cc60eaca9c06926"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-20294","description":"A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality, integrity, and availability."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-20388","versionConstraint":"< 0:2.9.1-6.el7.5 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-20388","fix":{"state":"fixed","versions":["0:2.9.1-6.el7.5"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:2.9.1-6.el7.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-20388","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-20388","cwe":"CWE-401","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-20388","date":"2026-10-08","epss":0.03145,"percentile":0.87542}],"risk":1.965625,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:3996","link":"https://access.redhat.com/errata/RHSA-2020:3996"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-20388","description":"A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability."},"relatedVulnerabilities":[{"id":"CVE-2019-20388","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-20388","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-20388","cwe":"CWE-401","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-20388","date":"2026-10-08","epss":0.03145,"percentile":0.87542}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html","https://gitlab.gnome.org/GNOME/libxml2/merge_requests/68","https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/","https://security.gentoo.org/glsa/202010-04","https://security.netapp.com/advisory/ntap-20200702-0005/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-20388","description":"xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7.5"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-20388","versionConstraint":"< 0:2.9.1-6.el7.5 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-20388","fix":{"state":"fixed","versions":["0:2.9.1-6.el7.5"],"available":[{"date":"2020-10-01","kind":"first-observed","version":"0:2.9.1-6.el7.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-20388","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-20388","cwe":"CWE-401","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-20388","date":"2026-10-08","epss":0.03145,"percentile":0.87542}],"risk":1.965625,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:3996","link":"https://access.redhat.com/errata/RHSA-2020:3996"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-20388","description":"A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability."},"relatedVulnerabilities":[{"id":"CVE-2019-20388","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-20388","cwe":"CWE-401","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-20388","cwe":"CWE-401","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-20388","date":"2026-10-08","epss":0.03145,"percentile":0.87542}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html","https://gitlab.gnome.org/GNOME/libxml2/merge_requests/68","https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH/","https://security.gentoo.org/glsa/202010-04","https://security.netapp.com/advisory/ntap-20200702-0005/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2020.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-20388","description":"xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-8983","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8983","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-8983","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8983","date":"2026-10-08","epss":0.03871,"percentile":0.8993}],"risk":1.9355,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8983","description":"An integer overflow flaw, leading to a heap-based buffer overflow, was found in glibc's _IO_wstr_overflow() function. An attacker able to make an application call this function could use this flaw to crash that application or, potentially, execute arbitrary code with the permissions of the user running the application."},"relatedVulnerabilities":[{"id":"CVE-2015-8983","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8983","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8983","date":"2026-10-08","epss":0.03871,"percentile":0.8993}],"urls":["http://www.openwall.com/lists/oss-security/2017/02/14/9","http://www.securityfocus.com/bid/72740","https://sourceware.org/bugzilla/show_bug.cgi?id=17269","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=bdf1ff052a8e23d637f2c838fa5642d78fcedc33","https://www.sourceware.org/ml/libc-alpha/2015-08/msg00609.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8983","description":"Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to computing a size in bytes, which triggers a heap-based buffer overflow."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2015-8983","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8983","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2015-8983","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8983","date":"2026-10-08","epss":0.03871,"percentile":0.8993}],"risk":1.9355,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8983","description":"An integer overflow flaw, leading to a heap-based buffer overflow, was found in glibc's _IO_wstr_overflow() function. An attacker able to make an application call this function could use this flaw to crash that application or, potentially, execute arbitrary code with the permissions of the user running the application."},"relatedVulnerabilities":[{"id":"CVE-2015-8983","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8983","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8983","date":"2026-10-08","epss":0.03871,"percentile":0.8993}],"urls":["http://www.openwall.com/lists/oss-security/2017/02/14/9","http://www.securityfocus.com/bid/72740","https://sourceware.org/bugzilla/show_bug.cgi?id=17269","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=bdf1ff052a8e23d637f2c838fa5642d78fcedc33","https://www.sourceware.org/ml/libc-alpha/2015-08/msg00609.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8983","description":"Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to computing a size in bytes, which triggers a heap-based buffer overflow."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-14.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-22826","versionConstraint":"< 0:2.1.0-14.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-22826","fix":{"state":"fixed","versions":["0:2.1.0-14.el7_9"],"available":[{"date":"2022-03-29","kind":"first-observed","version":"0:2.1.0-14.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-22826","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-22826","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-22826","date":"2026-10-08","epss":0.02801,"percentile":0.86057}],"risk":1.93269,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:1069","link":"https://access.redhat.com/errata/RHSA-2022:1069"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-22826","description":"expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability, confidentiality and integrity."},"relatedVulnerabilities":[{"id":"CVE-2022-22826","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-22826","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-22826","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-22826","date":"2026-10-08","epss":0.02801,"percentile":0.86057}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/17/3","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://github.com/libexpat/libexpat/pull/539","https://security.gentoo.org/glsa/202209-24","https://www.debian.org/security/2022/dsa-5073","https://www.tenable.com/security/tns-2022-05"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-22826","description":"nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-14.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-22827","versionConstraint":"< 0:2.1.0-14.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-22827","fix":{"state":"fixed","versions":["0:2.1.0-14.el7_9"],"available":[{"date":"2022-03-29","kind":"first-observed","version":"0:2.1.0-14.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-22827","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-22827","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-22827","date":"2026-10-08","epss":0.02801,"percentile":0.86057}],"risk":1.93269,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:1069","link":"https://access.redhat.com/errata/RHSA-2022:1069"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-22827","description":"expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability, confidentiality and integrity."},"relatedVulnerabilities":[{"id":"CVE-2022-22827","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-22827","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-22827","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-22827","date":"2026-10-08","epss":0.02801,"percentile":0.86057}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/17/3","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://github.com/libexpat/libexpat/pull/539","https://security.gentoo.org/glsa/202209-24","https://www.debian.org/security/2022/dsa-5073","https://www.tenable.com/security/tns-2022-05"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-22827","description":"storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow."}]},{"artifact":{"id":"92876d71e73259d4","cpes":["cpe:2.3:a:nss-softokn:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*"],"name":"nss-softokn","purl":"pkg:rpm/centos/nss-softokn@3.28.3-8.el7_4?arch=x86_64&distro=centos-7&upstream=nss-softokn-3.28.3-8.el7_4.src.rpm","type":"rpm","version":"3.28.3-8.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-2613","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-softokn","version":"0:3.28.3-8.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-2613","fix":{"state":"wont-fix","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2015-2613","date":"2026-10-08","epss":0.03841,"percentile":0.89849}],"risk":1.9205,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-2613","description":"Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE."},"relatedVulnerabilities":[{"id":"CVE-2015-2613","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2015-2613","date":"2026-10-08","epss":0.03841,"percentile":0.89849}],"urls":["http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html","http://rhn.redhat.com/errata/RHSA-2015-1241.html","http://rhn.redhat.com/errata/RHSA-2015-1242.html","http://rhn.redhat.com/errata/RHSA-2015-1485.html","http://rhn.redhat.com/errata/RHSA-2015-1488.html","http://www.debian.org/security/2015/dsa-3316","http://www.debian.org/security/2015/dsa-3339","http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","http://www.securityfocus.com/bid/75871","http://www.securitytracker.com/id/1032910","http://www.ubuntu.com/usn/USN-2696-1","http://www.ubuntu.com/usn/USN-2706-1","https://kc.mcafee.com/corporate/index?page=content&id=SB10139","https://security.gentoo.org/glsa/201603-11","https://security.gentoo.org/glsa/201603-14"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-2613","description":"Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE."}]},{"artifact":{"id":"25cd735f603572c2","cpes":["cpe:2.3:a:nss-softokn-freebl:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn-freebl:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn_freebl:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn_freebl:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*"],"name":"nss-softokn-freebl","purl":"pkg:rpm/centos/nss-softokn-freebl@3.28.3-8.el7_4?arch=x86_64&distro=centos-7&upstream=nss-softokn-3.28.3-8.el7_4.src.rpm","type":"rpm","version":"3.28.3-8.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss-softokn","version":"3.28.3-8.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2015-2613","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-softokn","version":"3.28.3-8.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-2613","fix":{"state":"wont-fix","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2015-2613","date":"2026-10-08","epss":0.03841,"percentile":0.89849}],"risk":1.9205,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-2613","description":"Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE."},"relatedVulnerabilities":[{"id":"CVE-2015-2613","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2015-2613","date":"2026-10-08","epss":0.03841,"percentile":0.89849}],"urls":["http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html","http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html","http://rhn.redhat.com/errata/RHSA-2015-1241.html","http://rhn.redhat.com/errata/RHSA-2015-1242.html","http://rhn.redhat.com/errata/RHSA-2015-1485.html","http://rhn.redhat.com/errata/RHSA-2015-1488.html","http://www.debian.org/security/2015/dsa-3316","http://www.debian.org/security/2015/dsa-3339","http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","http://www.securityfocus.com/bid/75871","http://www.securitytracker.com/id/1032910","http://www.ubuntu.com/usn/USN-2696-1","http://www.ubuntu.com/usn/USN-2706-1","https://kc.mcafee.com/corporate/index?page=content&id=SB10139","https://security.gentoo.org/glsa/201603-11","https://security.gentoo.org/glsa/201603-14"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-2613","description":"Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-16.el7_6.1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-0735","versionConstraint":"< 1:1.0.2k-16.el7_6.1 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-0735","fix":{"state":"fixed","versions":["1:1.0.2k-16.el7_6.1"],"available":[{"date":"2020-12-25","kind":"first-observed","version":"1:1.0.2k-16.el7_6.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.1,"impactScore":3.6,"exploitabilityScore":1.5},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-0735","cwe":"CWE-327","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-0735","date":"2026-10-08","epss":0.04724,"percentile":0.91602}],"risk":1.91322,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:0483","link":"https://access.redhat.com/errata/RHSA-2019:0483"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-0735","description":"The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1)."},"relatedVulnerabilities":[{"id":"CVE-2018-0735","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-0735","cwe":"CWE-327","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-0735","date":"2026-10-08","epss":0.04724,"percentile":0.91602}],"urls":["http://www.securityfocus.com/bid/105750","http://www.securitytracker.com/id/1041986","https://access.redhat.com/errata/RHSA-2019:3700","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=56fb454d281a023b3f950d969693553d3f3ceea1","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=b1d6d55ece1c26fa2829e2b819b038d7b6d692b4","https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html","https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","https://security.netapp.com/advisory/ntap-20181105-0002/","https://usn.ubuntu.com/3840-1/","https://www.debian.org/security/2018/dsa-4348","https://www.openssl.org/news/secadv/20181029.txt","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-0735","description":"The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1)."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-25313","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-25313","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-25313","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-25313","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-25313","date":"2026-10-08","epss":0.03295,"percentile":0.88164}],"risk":1.8946249999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-25313","description":"A flaw was found in expat. A stack exhaustion in doctype parsing could be triggered by a file with a large number of opening braces, resulting in a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2022-25313","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-25313","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-25313","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-25313","date":"2026-10-08","epss":0.03295,"percentile":0.88164}],"urls":["http://www.openwall.com/lists/oss-security/2022/02/19/1","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://github.com/libexpat/libexpat/pull/558","https://lists.debian.org/debian-lts-announce/2022/03/msg00007.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UFRBA3UQVIQKXTBUQXDWQOVWNBKLERU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y27XO3JMKAOMQZVPS3B4MJGEAHCZF5OM/","https://security.gentoo.org/glsa/202209-24","https://security.netapp.com/advisory/ntap-20220303-0008/","https://www.debian.org/security/2022/dsa-5085","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-25313","description":"In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-9048","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9048","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9048","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-9048","cwe":"CWE-119","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-9048","date":"2026-10-08","epss":0.04848,"percentile":0.91795}],"risk":1.8907200000000002,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9048","description":"libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash."},"relatedVulnerabilities":[{"id":"CVE-2017-9048","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9048","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-9048","cwe":"CWE-119","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-9048","date":"2026-10-08","epss":0.04848,"percentile":0.91795}],"urls":["http://www.debian.org/security/2017/dsa-3952","http://www.openwall.com/lists/oss-security/2017/05/15/1","http://www.securityfocus.com/bid/98556","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201711-01"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9048","description":"libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-9048","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-9048","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9048","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-9048","cwe":"CWE-119","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-9048","date":"2026-10-08","epss":0.04848,"percentile":0.91795}],"risk":1.8907200000000002,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-9048","description":"libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash."},"relatedVulnerabilities":[{"id":"CVE-2017-9048","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9048","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2017-9048","cwe":"CWE-119","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2017-9048","date":"2026-10-08","epss":0.04848,"percentile":0.91795}],"urls":["http://www.debian.org/security/2017/dsa-3952","http://www.openwall.com/lists/oss-security/2017/05/15/1","http://www.securityfocus.com/bid/98556","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://security.gentoo.org/glsa/201711-01"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9048","description":"libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-88.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-20852","versionConstraint":"< 0:2.7.5-88.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-20852","fix":{"state":"fixed","versions":["0:2.7.5-88.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-88.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20852","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-20852","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-20852","date":"2026-10-08","epss":0.03668,"percentile":0.89348}],"risk":1.88902,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1131","link":"https://access.redhat.com/errata/RHSA-2020:1131"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-20852","description":"http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3."},"relatedVulnerabilities":[{"id":"CVE-2018-20852","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20852","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-20852","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-20852","date":"2026-10-08","epss":0.03668,"percentile":0.89348}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00071.html","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00074.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","https://access.redhat.com/errata/RHSA-2019:3725","https://access.redhat.com/errata/RHSA-2019:3948","https://bugs.python.org/issue35121","https://lists.debian.org/debian-lts-announce/2019/08/msg00022.html","https://lists.debian.org/debian-lts-announce/2019/08/msg00040.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/","https://python-security.readthedocs.io/vuln/cookie-domain-check.html","https://security.gentoo.org/glsa/202003-26","https://usn.ubuntu.com/4127-1/","https://usn.ubuntu.com/4127-2/","https://www.oracle.com/security-alerts/cpuapr2020.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20852","description":"http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-88.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20852","versionConstraint":"< 0:2.7.5-88.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-20852","fix":{"state":"fixed","versions":["0:2.7.5-88.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-88.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20852","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-20852","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-20852","date":"2026-10-08","epss":0.03668,"percentile":0.89348}],"risk":1.88902,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1131","link":"https://access.redhat.com/errata/RHSA-2020:1131"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-20852","description":"http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3."},"relatedVulnerabilities":[{"id":"CVE-2018-20852","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20852","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-20852","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-20852","date":"2026-10-08","epss":0.03668,"percentile":0.89348}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00071.html","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00074.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","https://access.redhat.com/errata/RHSA-2019:3725","https://access.redhat.com/errata/RHSA-2019:3948","https://bugs.python.org/issue35121","https://lists.debian.org/debian-lts-announce/2019/08/msg00022.html","https://lists.debian.org/debian-lts-announce/2019/08/msg00040.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/COATURTCY7G67AYI6UDV5B2JZTBCKIDX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K7HNVIFMETMFWWWUNTB72KYJYXCZOS5V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBTGPBUABGXZ7WH7677OEM3NSP6ZEA76/","https://python-security.readthedocs.io/vuln/cookie-domain-check.html","https://security.gentoo.org/glsa/202003-26","https://usn.ubuntu.com/4127-1/","https://usn.ubuntu.com/4127-2/","https://www.oracle.com/security-alerts/cpuapr2020.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20852","description":"http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3."}]},{"artifact":{"id":"8a7d97338866cd1c","cpes":["cpe:2.3:a:binutils:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:rpm/centos/binutils@2.25.1-32.base.el7_4.1?arch=x86_64&distro=centos-7&upstream=binutils-2.25.1-32.base.el7_4.1.src.rpm","type":"rpm","version":"2.25.1-32.base.el7_4.1","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-14939","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"binutils","version":"0:2.25.1-32.base.el7_4.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-14939","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-14939","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-14939","date":"2026-10-08","epss":0.05941,"percentile":0.93084}],"risk":1.8714149999999996,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-14939","description":"decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to read_1_byte."},"relatedVulnerabilities":[{"id":"CVE-2017-14939","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-14939","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-14939","date":"2026-10-08","epss":0.05941,"percentile":0.93084}],"urls":["http://www.securityfocus.com/bid/101216","https://blogs.gentoo.org/ago/2017/09/26/binutils-heap-based-buffer-overflow-in-read_1_byte-dwarf2-c/","https://sourceware.org/bugzilla/show_bug.cgi?id=22169","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=515f23e63c0074ab531bc954f84ca40c6281a724","https://www.exploit-db.com/exploits/42970/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-14939","description":"decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to read_1_byte."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-222.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-5180","versionConstraint":"< 0:2.17-222.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-5180","fix":{"state":"fixed","versions":["0:2.17-222.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.17-222.el7"}]},"cvss":[],"cwes":[{"cve":"CVE-2015-5180","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-5180","date":"2026-10-08","epss":0.06219,"percentile":0.93356}],"risk":1.8657,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0805","link":"https://access.redhat.com/errata/RHSA-2018:0805"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-5180","description":"res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash)."},"relatedVulnerabilities":[{"id":"CVE-2015-5180","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-5180","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-5180","date":"2026-10-08","epss":0.06219,"percentile":0.93356}],"urls":["http://www.securityfocus.com/bid/99324","http://www.ubuntu.com/usn/USN-3239-1","http://www.ubuntu.com/usn/USN-3239-2","https://access.redhat.com/errata/RHSA-2018:0805","https://bugzilla.redhat.com/show_bug.cgi?id=1249603","https://security.gentoo.org/glsa/201706-19","https://sourceware.org/bugzilla/attachment.cgi?id=8492","https://sourceware.org/bugzilla/show_bug.cgi?id=18784","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=fc82b0a2dfe7dbd35671c10510a8da1043d746a5","https://sourceware.org/ml/libc-alpha/2017-02/msg00079.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-5180","description":"res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash)."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-222.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2015-5180","versionConstraint":"< 0:2.17-222.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-5180","fix":{"state":"fixed","versions":["0:2.17-222.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.17-222.el7"}]},"cvss":[],"cwes":[{"cve":"CVE-2015-5180","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-5180","date":"2026-10-08","epss":0.06219,"percentile":0.93356}],"risk":1.8657,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0805","link":"https://access.redhat.com/errata/RHSA-2018:0805"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-5180","description":"res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash)."},"relatedVulnerabilities":[{"id":"CVE-2015-5180","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-5180","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-5180","date":"2026-10-08","epss":0.06219,"percentile":0.93356}],"urls":["http://www.securityfocus.com/bid/99324","http://www.ubuntu.com/usn/USN-3239-1","http://www.ubuntu.com/usn/USN-3239-2","https://access.redhat.com/errata/RHSA-2018:0805","https://bugzilla.redhat.com/show_bug.cgi?id=1249603","https://security.gentoo.org/glsa/201706-19","https://sourceware.org/bugzilla/attachment.cgi?id=8492","https://sourceware.org/bugzilla/show_bug.cgi?id=18784","https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=fc82b0a2dfe7dbd35671c10510a8da1043d746a5","https://sourceware.org/ml/libc-alpha/2017-02/msg00079.html","https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-5180","description":"res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash)."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-90.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-20907","versionConstraint":"< 0:2.7.5-90.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-20907","fix":{"state":"fixed","versions":["0:2.7.5-90.el7"],"available":[{"date":"2020-11-11","kind":"first-observed","version":"0:2.7.5-90.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-20907","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-20907","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-20907","date":"2026-10-08","epss":0.02985,"percentile":0.86903}],"risk":1.8656249999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:5009","link":"https://access.redhat.com/errata/RHSA-2020:5009"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-20907","description":"A flaw was found in python. In Lib/tarfile.py an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation."},"relatedVulnerabilities":[{"id":"CVE-2019-20907","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-20907","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-20907","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-20907","date":"2026-10-08","epss":0.02985,"percentile":0.86903}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00051.html","http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00052.html","http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00053.html","http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00056.html","https://bugs.python.org/issue39017","https://github.com/python/cpython/pull/21454","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.debian.org/debian-lts-announce/2020/11/msg00032.html","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36XI3EEQNMHGOZEI63Y7UV6XZRELYEAU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CAXHCY4V3LPAAJOBCJ26ISZ4NUXQXTUZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CNHPQGSP2YM3JAUD2VAMPXTIUQTZ2M2U/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CTUNTBJ3POHONQOTLEZC46POCIYYTAKZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE4O3PNDNNOMSKHNUKZKD3NGHIFUFDPX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTBKKOLFFNHG6CM4ACDX4APHSD5ZX5N4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OXI72HIHMXCQFWTULUXDG7VDA2BCYL4Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDKKRXLNVXRF6VGERZSR3OMQR5D5QI6I/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TOGKLGTXZLHQQFBVCAPSUDA6DOOJFNRY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3TALOUBYU2MQD4BPLRTDQUMBKGCAXUA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V53P2YOLEQH4J7S5QHXMKMZYFTVVMTMO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VT4AF72TJ2XNIKCR4WEBR7URBJJ4YZRD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YILCHHTNLH4GG4GSQBX2MZRKZBXOLCKE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YSL3XWVDMSMKO23HR74AJQ6VEM3C2NTS/","https://security.gentoo.org/glsa/202008-01","https://security.netapp.com/advisory/ntap-20200731-0002/","https://usn.ubuntu.com/4428-1/","https://www.oracle.com/security-alerts/cpujan2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-20907","description":"In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-90.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-20907","versionConstraint":"< 0:2.7.5-90.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-20907","fix":{"state":"fixed","versions":["0:2.7.5-90.el7"],"available":[{"date":"2020-11-11","kind":"first-observed","version":"0:2.7.5-90.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-20907","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-20907","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-20907","date":"2026-10-08","epss":0.02985,"percentile":0.86903}],"risk":1.8656249999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:5009","link":"https://access.redhat.com/errata/RHSA-2020:5009"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-20907","description":"A flaw was found in python. In Lib/tarfile.py an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation."},"relatedVulnerabilities":[{"id":"CVE-2019-20907","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-20907","cwe":"CWE-835","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-20907","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-20907","date":"2026-10-08","epss":0.02985,"percentile":0.86903}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00051.html","http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00052.html","http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00053.html","http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00056.html","https://bugs.python.org/issue39017","https://github.com/python/cpython/pull/21454","https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html","https://lists.debian.org/debian-lts-announce/2020/11/msg00032.html","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36XI3EEQNMHGOZEI63Y7UV6XZRELYEAU/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CAXHCY4V3LPAAJOBCJ26ISZ4NUXQXTUZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CNHPQGSP2YM3JAUD2VAMPXTIUQTZ2M2U/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CTUNTBJ3POHONQOTLEZC46POCIYYTAKZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE4O3PNDNNOMSKHNUKZKD3NGHIFUFDPX/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NTBKKOLFFNHG6CM4ACDX4APHSD5ZX5N4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OXI72HIHMXCQFWTULUXDG7VDA2BCYL4Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDKKRXLNVXRF6VGERZSR3OMQR5D5QI6I/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TOGKLGTXZLHQQFBVCAPSUDA6DOOJFNRY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3TALOUBYU2MQD4BPLRTDQUMBKGCAXUA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V53P2YOLEQH4J7S5QHXMKMZYFTVVMTMO/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VT4AF72TJ2XNIKCR4WEBR7URBJJ4YZRD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YILCHHTNLH4GG4GSQBX2MZRKZBXOLCKE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YSL3XWVDMSMKO23HR74AJQ6VEM3C2NTS/","https://security.gentoo.org/glsa/202008-01","https://security.netapp.com/advisory/ntap-20200731-0002/","https://usn.ubuntu.com/4428-1/","https://www.oracle.com/security-alerts/cpujan2021.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-20907","description":"In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation."}]},{"artifact":{"id":"f09221fe76dc6d9b","cpes":["cpe:2.3:a:centos:glib2:2.50.3-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:glib2:glib2:2.50.3-3.el7:*:*:*:*:*:*:*"],"name":"glib2","purl":"pkg:rpm/centos/glib2@2.50.3-3.el7?arch=x86_64&distro=centos-7&upstream=glib2-2.50.3-3.el7.src.rpm","type":"rpm","version":"2.50.3-3.el7","language":"","licenses":["LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-16429","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glib2","version":"0:2.50.3-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-16429","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-16429","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-16429","date":"2026-10-08","epss":0.03532,"percentile":0.88939}],"risk":1.8543,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-16429","description":"GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str()."},"relatedVulnerabilities":[{"id":"CVE-2018-16429","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-16429","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-16429","date":"2026-10-08","epss":0.03532,"percentile":0.88939}],"urls":["https://gitlab.gnome.org/GNOME/glib/commit/cec71705406f0b2790422f0c1aa0ff3b4b464b1b","https://gitlab.gnome.org/GNOME/glib/issues/1361","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2019/07/msg00029.html","https://usn.ubuntu.com/3767-1/","https://usn.ubuntu.com/3767-2/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-16429","description":"GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str()."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-260.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-16997","versionConstraint":"< 0:2.17-260.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-16997","fix":{"state":"fixed","versions":["0:2.17-260.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.17-260.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16997","cwe":"CWE-426","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-16997","date":"2026-10-08","epss":0.02895,"percentile":0.86512}],"risk":1.8528,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3092","link":"https://access.redhat.com/errata/RHSA-2018:3092"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-16997","description":"elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the \"./\" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution."},"relatedVulnerabilities":[{"id":"CVE-2017-16997","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","metrics":{"baseScore":9.3,"impactScore":10.1,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16997","cwe":"CWE-426","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-16997","date":"2026-10-08","epss":0.02895,"percentile":0.86512}],"urls":["http://www.securityfocus.com/bid/102228","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3092","https://bugs.debian.org/884615","https://sourceware.org/bugzilla/show_bug.cgi?id=22625","https://sourceware.org/ml/libc-alpha/2017-12/msg00528.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-16997","description":"elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the \"./\" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-260.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-16997","versionConstraint":"< 0:2.17-260.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-16997","fix":{"state":"fixed","versions":["0:2.17-260.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.17-260.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16997","cwe":"CWE-426","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-16997","date":"2026-10-08","epss":0.02895,"percentile":0.86512}],"risk":1.8528,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3092","link":"https://access.redhat.com/errata/RHSA-2018:3092"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-16997","description":"elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the \"./\" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution."},"relatedVulnerabilities":[{"id":"CVE-2017-16997","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","metrics":{"baseScore":9.3,"impactScore":10.1,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16997","cwe":"CWE-426","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-16997","date":"2026-10-08","epss":0.02895,"percentile":0.86512}],"urls":["http://www.securityfocus.com/bid/102228","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3092","https://bugs.debian.org/884615","https://sourceware.org/bugzilla/show_bug.cgi?id=22625","https://sourceware.org/ml/libc-alpha/2017-12/msg00528.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-16997","description":"elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the \"./\" directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very uncommon; most likely, no such program is shipped with any common Linux distribution."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-5678","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-5678","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-08","epss":0.04459,"percentile":0.9119}],"risk":1.850485,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-5678","description":"A flaw was found in OpenSSL, which caused the generation or checking of long X9.42 DH keys or parameters to be much slower than expected. This issue could lead to a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2023-5678","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-5678","cwe":"CWE-606","type":"Secondary","source":"openssl-security@openssl.org"},{"cve":"CVE-2023-5678","cwe":"CWE-754","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-5678","date":"2026-10-08","epss":0.04459,"percentile":0.9119}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6","https://www.openssl.org/news/secadv/20231106.txt","http://www.openwall.com/lists/oss-security/2024/03/11/1","https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html","https://security.netapp.com/advisory/ntap-20231130-0010/","https://cert-portal.siemens.com/productcert/html/ssa-093430.html","https://cert-portal.siemens.com/productcert/html/ssa-128433.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-277137.html","https://cert-portal.siemens.com/productcert/html/ssa-331112.html","https://cert-portal.siemens.com/productcert/html/ssa-341067.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-556635.html","https://cert-portal.siemens.com/productcert/html/ssa-613116.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-5678","description":"Issue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays.  Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() doesn't make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it doesn't check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions.  An application calling any of those other\nfunctions may similarly be affected.  The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-76.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-1060","versionConstraint":"< 0:2.7.5-76.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1060","fix":{"state":"fixed","versions":["0:2.7.5-76.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-76.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1060","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2018-1060","date":"2026-10-08","epss":0.05039,"percentile":0.9207}],"risk":1.8392349999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3041","link":"https://access.redhat.com/errata/RHSA-2018:3041"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1060","description":"A flaw was found in the way catastrophic backtracking was implemented in python's pop3lib's apop() method. An attacker could use this flaw to cause denial of service."},"relatedVulnerabilities":[{"id":"CVE-2018-1060","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1060","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2018-1060","date":"2026-10-08","epss":0.05039,"percentile":0.9207}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://www.securitytracker.com/id/1042001","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3041","https://access.redhat.com/errata/RHSA-2018:3505","https://access.redhat.com/errata/RHSA-2019:1260","https://access.redhat.com/errata/RHSA-2019:3725","https://bugs.python.org/issue32981","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1060","https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-6-release-candidate-1","https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-release-candidate-1","https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html","https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03951en_us","https://usn.ubuntu.com/3817-1/","https://usn.ubuntu.com/3817-2/","https://www.debian.org/security/2018/dsa-4306","https://www.debian.org/security/2018/dsa-4307","https://www.oracle.com/security-alerts/cpujan2020.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1060","description":"python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.7.5-76.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-1060","versionConstraint":"< 0:2.7.5-76.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-1060","fix":{"state":"fixed","versions":["0:2.7.5-76.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.7.5-76.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1060","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2018-1060","date":"2026-10-08","epss":0.05039,"percentile":0.9207}],"risk":1.8392349999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:3041","link":"https://access.redhat.com/errata/RHSA-2018:3041"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-1060","description":"A flaw was found in the way catastrophic backtracking was implemented in python's pop3lib's apop() method. An attacker could use this flaw to cause denial of service."},"relatedVulnerabilities":[{"id":"CVE-2018-1060","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-1060","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2018-1060","date":"2026-10-08","epss":0.05039,"percentile":0.9207}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://www.securitytracker.com/id/1042001","https://access.redhat.com/errata/RHBA-2019:0327","https://access.redhat.com/errata/RHSA-2018:3041","https://access.redhat.com/errata/RHSA-2018:3505","https://access.redhat.com/errata/RHSA-2019:1260","https://access.redhat.com/errata/RHSA-2019:3725","https://bugs.python.org/issue32981","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1060","https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-6-release-candidate-1","https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-release-candidate-1","https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html","https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/","https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03951en_us","https://usn.ubuntu.com/3817-1/","https://usn.ubuntu.com/3817-2/","https://www.debian.org/security/2018/dsa-4306","https://www.debian.org/security/2018/dsa-4307","https://www.oracle.com/security-alerts/cpujan2020.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-1060","description":"python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service."}]},{"artifact":{"id":"8a7d97338866cd1c","cpes":["cpe:2.3:a:binutils:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*","cpe:2.3:a:centos:binutils:2.25.1-32.base.el7_4.1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:rpm/centos/binutils@2.25.1-32.base.el7_4.1?arch=x86_64&distro=centos-7&upstream=binutils-2.25.1-32.base.el7_4.1.src.rpm","type":"rpm","version":"2.25.1-32.base.el7_4.1","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-6323","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"binutils","version":"0:2.25.1-32.base.el7_4.1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-6323","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-6323","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-6323","date":"2026-10-08","epss":0.05834,"percentile":0.92979}],"risk":1.8377099999999997,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-6323","description":"The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer overflow because bfd_size_type multiplication is not used. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."},"relatedVulnerabilities":[{"id":"CVE-2018-6323","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-6323","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-6323","date":"2026-10-08","epss":0.05834,"percentile":0.92979}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html","http://www.securityfocus.com/bid/102821","https://sourceware.org/bugzilla/show_bug.cgi?id=22746","https://www.exploit-db.com/exploits/44035/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-6323","description":"The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer overflow because bfd_size_type multiplication is not used. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-35942","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-35942","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-35942","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-35942","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-35942","date":"2026-10-08","epss":0.02605,"percentile":0.84917}],"risk":1.836525,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-35942","description":"An integer overflow flaw was found in glibc that may result in reading of arbitrary memory when wordexp is used with a specially crafted untrusted regular expression input."},"relatedVulnerabilities":[{"id":"CVE-2021-35942","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-35942","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-35942","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-35942","date":"2026-10-08","epss":0.02605,"percentile":0.84917}],"urls":["https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","https://security.gentoo.org/glsa/202208-24","https://security.netapp.com/advisory/ntap-20210827-0005/","https://sourceware.org/bugzilla/show_bug.cgi?id=28011","https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=5adda61f62b77384718b4c0d8336ade8f2b4b35c","https://sourceware.org/glibc/wiki/Security%20Exceptions"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-35942","description":"The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but strtoul should have been used to ensure correct calculations."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-35942","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-35942","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-35942","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-35942","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-35942","date":"2026-10-08","epss":0.02605,"percentile":0.84917}],"risk":1.836525,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-35942","description":"An integer overflow flaw was found in glibc that may result in reading of arbitrary memory when wordexp is used with a specially crafted untrusted regular expression input."},"relatedVulnerabilities":[{"id":"CVE-2021-35942","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-35942","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-35942","cwe":"CWE-704","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-35942","date":"2026-10-08","epss":0.02605,"percentile":0.84917}],"urls":["https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","https://security.gentoo.org/glsa/202208-24","https://security.netapp.com/advisory/ntap-20210827-0005/","https://sourceware.org/bugzilla/show_bug.cgi?id=28011","https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=5adda61f62b77384718b4c0d8336ade8f2b4b35c","https://sourceware.org/glibc/wiki/Security%20Exceptions"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-35942","description":"The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but strtoul should have been used to ensure correct calculations."}]},{"artifact":{"id":"105c3f3269638a7a","cpes":["cpe:2.3:a:krb5-libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5-libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*"],"name":"krb5-libs","purl":"pkg:rpm/centos/krb5-libs@1.15.1-8.el7?arch=x86_64&distro=centos-7&upstream=krb5-1.15.1-8.el7.src.rpm","type":"rpm","version":"1.15.1-8.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"krb5","version":"1.15.1-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-11462","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"krb5","version":"1.15.1-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-11462","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-11462","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-11462","date":"2026-10-08","epss":0.05481,"percentile":0.92559}],"risk":1.8361349999999999,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-11462","description":"Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error."},"relatedVulnerabilities":[{"id":"CVE-2017-11462","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-11462","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-11462","date":"2026-10-08","epss":0.05481,"percentile":0.92559}],"urls":["http://krbdev.mit.edu/rt/Ticket/Display.html?id=8598","https://bugzilla.redhat.com/show_bug.cgi?id=1488873","https://github.com/krb5/krb5/commit/56f7b1bc95a2a3eeb420e069e7655fb181ade5cf","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2FPRUP4YVOEBGEROUYWZFEQ64HTMGNED/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-11462","description":"Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving automatic deletion of security contexts on error."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-5131","versionConstraint":"< 0:2.9.1-6.el7.4 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-5131","fix":{"state":"fixed","versions":["0:2.9.1-6.el7.4"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.9.1-6.el7.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-5131","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-5131","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-5131","date":"2026-10-08","epss":0.02251,"percentile":0.8238}],"risk":1.8345650000000002,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1190","link":"https://access.redhat.com/errata/RHSA-2020:1190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-5131","description":"Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function."},"relatedVulnerabilities":[{"id":"CVE-2016-5131","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-5131","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-5131","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-5131","date":"2026-10-08","epss":0.02251,"percentile":0.8238}],"urls":["http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html","http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html","http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html","http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html","http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html","http://rhn.redhat.com/errata/RHSA-2016-1485.html","http://www.debian.org/security/2016/dsa-3637","http://www.securityfocus.com/bid/92053","http://www.securitytracker.com/id/1036428","http://www.securitytracker.com/id/1038623","http://www.ubuntu.com/usn/USN-3041-1","https://bugzilla.redhat.com/show_bug.cgi?id=1358641","https://codereview.chromium.org/2127493002","https://crbug.com/623378","https://security.gentoo.org/glsa/201610-09","https://security.gentoo.org/glsa/201701-37","https://source.android.com/security/bulletin/2017-05-01","https://support.apple.com/HT207141","https://support.apple.com/HT207142","https://support.apple.com/HT207143","https://support.apple.com/HT207170"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-5131","description":"Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-5131","versionConstraint":"< 0:2.9.1-6.el7.4 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-5131","fix":{"state":"fixed","versions":["0:2.9.1-6.el7.4"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.9.1-6.el7.4"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-5131","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-5131","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-5131","date":"2026-10-08","epss":0.02251,"percentile":0.8238}],"risk":1.8345650000000002,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1190","link":"https://access.redhat.com/errata/RHSA-2020:1190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-5131","description":"Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function."},"relatedVulnerabilities":[{"id":"CVE-2016-5131","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-5131","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-5131","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-5131","date":"2026-10-08","epss":0.02251,"percentile":0.8238}],"urls":["http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html","http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html","http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html","http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html","http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html","http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html","http://rhn.redhat.com/errata/RHSA-2016-1485.html","http://www.debian.org/security/2016/dsa-3637","http://www.securityfocus.com/bid/92053","http://www.securitytracker.com/id/1036428","http://www.securitytracker.com/id/1038623","http://www.ubuntu.com/usn/USN-3041-1","https://bugzilla.redhat.com/show_bug.cgi?id=1358641","https://codereview.chromium.org/2127493002","https://crbug.com/623378","https://security.gentoo.org/glsa/201610-09","https://security.gentoo.org/glsa/201701-37","https://source.android.com/security/bulletin/2017-05-01","https://support.apple.com/HT207141","https://support.apple.com/HT207142","https://support.apple.com/HT207143","https://support.apple.com/HT207170"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-5131","description":"Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-27782","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-27782","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27782","cwe":"CWE-840","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-27782","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-27782","date":"2026-10-08","epss":0.0293,"percentile":0.86676}],"risk":1.8312499999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-27782","description":"A vulnerability was found in curl. This issue occurs because curl can reuse a previously created connection even when a TLS or SSH-related option is changed that should have prohibited reuse. This flaw leads to an authentication bypass, either by mistake or by a malicious actor."},"relatedVulnerabilities":[{"id":"CVE-2022-27782","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27782","cwe":"CWE-840","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-27782","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-27782","date":"2026-10-08","epss":0.0293,"percentile":0.86676}],"urls":["http://www.openwall.com/lists/oss-security/2023/03/20/6","https://hackerone.com/reports/1555796","https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","https://security.gentoo.org/glsa/202212-01","https://security.netapp.com/advisory/ntap-20220609-0009/","https://www.debian.org/security/2022/dsa-5197"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-27782","description":"libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-27782","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-27782","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27782","cwe":"CWE-840","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-27782","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-27782","date":"2026-10-08","epss":0.0293,"percentile":0.86676}],"risk":1.8312499999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-27782","description":"A vulnerability was found in curl. This issue occurs because curl can reuse a previously created connection even when a TLS or SSH-related option is changed that should have prohibited reuse. This flaw leads to an authentication bypass, either by mistake or by a malicious actor."},"relatedVulnerabilities":[{"id":"CVE-2022-27782","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27782","cwe":"CWE-840","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-27782","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-27782","date":"2026-10-08","epss":0.0293,"percentile":0.86676}],"urls":["http://www.openwall.com/lists/oss-security/2023/03/20/6","https://hackerone.com/reports/1555796","https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","https://security.gentoo.org/glsa/202212-01","https://security.netapp.com/advisory/ntap-20220609-0009/","https://www.debian.org/security/2022/dsa-5197"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-27782","description":"libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily."}]},{"artifact":{"id":"105c3f3269638a7a","cpes":["cpe:2.3:a:krb5-libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5-libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5_libs:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-libs:1.15.1-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_libs:1.15.1-8.el7:*:*:*:*:*:*:*"],"name":"krb5-libs","purl":"pkg:rpm/centos/krb5-libs@1.15.1-8.el7?arch=x86_64&distro=centos-7&upstream=krb5-1.15.1-8.el7.src.rpm","type":"rpm","version":"1.15.1-8.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"krb5","version":"1.15.1-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:1.15.1-18.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-7562","versionConstraint":"< 0:1.15.1-18.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"krb5","version":"1.15.1-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-7562","fix":{"state":"fixed","versions":["0:1.15.1-18.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:1.15.1-18.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-7562","cwe":"CWE-287","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2017-7562","cwe":"CWE-295","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2017-7562","cwe":"CWE-287","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-7562","date":"2026-10-08","epss":0.03178,"percentile":0.87672}],"risk":1.8273500000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0666","link":"https://access.redhat.com/errata/RHSA-2018:0666"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-7562","description":"An authentication bypass flaw was found in the way krb5's certauth interface handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances."},"relatedVulnerabilities":[{"id":"CVE-2017-7562","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-7562","cwe":"CWE-287","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2017-7562","cwe":"CWE-295","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2017-7562","cwe":"CWE-287","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-7562","date":"2026-10-08","epss":0.03178,"percentile":0.87672}],"urls":["http://www.securityfocus.com/bid/100511","https://access.redhat.com/errata/RHSA-2018:0666","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7562","https://github.com/krb5/krb5/pull/694","https://github.com/krb5/krb5/pull/694/commits/1de6ca2f2eb1fdbab51f1549a25a6903aefcc196","https://github.com/krb5/krb5/pull/694/commits/50fe4074f188c2d4da0c421e96553acea8378db2","https://github.com/krb5/krb5/pull/694/commits/b7af544e50a4d8291524f590e20dd44430bf627d"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-7562","description":"An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-14.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-22825","versionConstraint":"< 0:2.1.0-14.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-22825","fix":{"state":"fixed","versions":["0:2.1.0-14.el7_9"],"available":[{"date":"2022-03-29","kind":"first-observed","version":"0:2.1.0-14.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-22825","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-22825","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-22825","date":"2026-10-08","epss":0.02636,"percentile":0.85107}],"risk":1.8188400000000005,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:1069","link":"https://access.redhat.com/errata/RHSA-2022:1069"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-22825","description":"expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability, confidentiality and integrity."},"relatedVulnerabilities":[{"id":"CVE-2022-22825","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-22825","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-22825","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-22825","date":"2026-10-08","epss":0.02636,"percentile":0.85107}],"urls":["http://www.openwall.com/lists/oss-security/2022/01/17/3","https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf","https://github.com/libexpat/libexpat/pull/539","https://security.gentoo.org/glsa/202209-24","https://www.debian.org/security/2022/dsa-5073","https://www.tenable.com/security/tns-2022-05"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-22825","description":"lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.4.44-25.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-25709","versionConstraint":"< 0:2.4.44-25.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-25709","fix":{"state":"fixed","versions":["0:2.4.44-25.el7_9"],"available":[{"date":"2022-02-23","kind":"first-observed","version":"0:2.4.44-25.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-25709","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-25709","date":"2026-10-08","epss":0.02858,"percentile":0.8633}],"risk":1.78625,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:0621","link":"https://access.redhat.com/errata/RHSA-2022:0621"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-25709","description":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-25709","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-25709","cwe":"CWE-617","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-25709","date":"2026-10-08","epss":0.02858,"percentile":0.8633}],"urls":["http://seclists.org/fulldisclosure/2021/Feb/14","https://bugzilla.redhat.com/show_bug.cgi?id=1899675","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/12/msg00008.html","https://security.netapp.com/advisory/ntap-20210716-0003/","https://support.apple.com/kb/HT212147","https://www.debian.org/security/2020/dsa-4792"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-25709","description":"A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-222.el7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-15670","versionConstraint":"< 0:2.17-222.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-15670","fix":{"state":"fixed","versions":["0:2.17-222.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.17-222.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-15670","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-15670","date":"2026-10-08","epss":0.02977,"percentile":0.86867}],"risk":1.7862,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0805","link":"https://access.redhat.com/errata/RHSA-2018:0805"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-15670","description":"The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string."},"relatedVulnerabilities":[{"id":"CVE-2017-15670","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-15670","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-15670","date":"2026-10-08","epss":0.02977,"percentile":0.86867}],"urls":["http://www.securityfocus.com/bid/101521","https://access.redhat.com/errata/RHSA-2018:0805","https://access.redhat.com/errata/RHSA-2018:1879","https://sourceware.org/bugzilla/show_bug.cgi?id=22320"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-15670","description":"The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-222.el7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-15670","versionConstraint":"< 0:2.17-222.el7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-15670","fix":{"state":"fixed","versions":["0:2.17-222.el7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.17-222.el7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-15670","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-15670","date":"2026-10-08","epss":0.02977,"percentile":0.86867}],"risk":1.7862,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2018:0805","link":"https://access.redhat.com/errata/RHSA-2018:0805"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-15670","description":"The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string."},"relatedVulnerabilities":[{"id":"CVE-2017-15670","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-15670","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-15670","date":"2026-10-08","epss":0.02977,"percentile":0.86867}],"urls":["http://www.securityfocus.com/bid/101521","https://access.redhat.com/errata/RHSA-2018:0805","https://access.redhat.com/errata/RHSA-2018:1879","https://sourceware.org/bugzilla/show_bug.cgi?id=22320"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-15670","description":"The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related to the processing of home directories using the ~ operator followed by a long string."}]},{"artifact":{"id":"17fba130d7153c29","cpes":["cpe:2.3:a:libtasn1:libtasn1:4.10-1.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libtasn1:4.10-1.el7:*:*:*:*:*:*:*"],"name":"libtasn1","purl":"pkg:rpm/centos/libtasn1@4.10-1.el7?arch=x86_64&distro=centos-7&upstream=libtasn1-4.10-1.el7.src.rpm","type":"rpm","version":"4.10-1.el7","language":"","licenses":["GPLv3+ and LGPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-6003","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libtasn1","version":"0:4.10-1.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-6003","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-6003","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-6003","date":"2026-10-08","epss":0.02825,"percentile":0.86175}],"risk":1.7656250000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-6003","description":"An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS."},"relatedVulnerabilities":[{"id":"CVE-2018-6003","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-6003","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-6003","date":"2026-10-08","epss":0.02825,"percentile":0.86175}],"urls":["http://git.savannah.nongnu.org/cgit/libtasn1.git/commit/?id=c593ae84cfcde8fea45787e53950e0ac71e9ca97","https://bugzilla.redhat.com/show_bug.cgi?id=1535926","https://bugzilla.suse.com/show_bug.cgi?id=1076832","https://gitlab.com/gnutls/libtasn1/commit/946565d8eb05fbf7970ea366e817581bb5a90910","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://www.debian.org/security/2018/dsa-4106"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-6003","description":"An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-27776","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-27776","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27776","cwe":"CWE-522","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-27776","cwe":"CWE-522","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-27776","date":"2026-10-08","epss":0.03777,"percentile":0.89666}],"risk":1.7563049999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-27776","description":"A vulnerability was found in curl. This security flaw allows leak authentication or cookie header data on HTTP redirects to the same host but another port number. Sending the same set of headers to a server on a different port number is a problem for applications that pass on custom `Authorization:` or `Cookie:`headers. Those headers often contain privacy-sensitive information or data."},"relatedVulnerabilities":[{"id":"CVE-2022-27776","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27776","cwe":"CWE-522","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-27776","cwe":"CWE-522","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-27776","date":"2026-10-08","epss":0.03777,"percentile":0.89666}],"urls":["https://hackerone.com/reports/1547048","https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/","https://security.gentoo.org/glsa/202212-01","https://security.netapp.com/advisory/ntap-20220609-0008/","https://www.debian.org/security/2022/dsa-5197"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-27776","description":"A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-27776","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-27776","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27776","cwe":"CWE-522","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-27776","cwe":"CWE-522","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-27776","date":"2026-10-08","epss":0.03777,"percentile":0.89666}],"risk":1.7563049999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-27776","description":"A vulnerability was found in curl. This security flaw allows leak authentication or cookie header data on HTTP redirects to the same host but another port number. Sending the same set of headers to a server on a different port number is a problem for applications that pass on custom `Authorization:` or `Cookie:`headers. Those headers often contain privacy-sensitive information or data."},"relatedVulnerabilities":[{"id":"CVE-2022-27776","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-27776","cwe":"CWE-522","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2022-27776","cwe":"CWE-522","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-27776","date":"2026-10-08","epss":0.03777,"percentile":0.89666}],"urls":["https://hackerone.com/reports/1547048","https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/","https://security.gentoo.org/glsa/202212-01","https://security.netapp.com/advisory/ntap-20220609-0008/","https://www.debian.org/security/2022/dsa-5197"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-27776","description":"A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number."}]},{"artifact":{"id":"2439f8bce118b50f","cpes":["cpe:2.3:a:centos:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*"],"name":"sqlite","purl":"pkg:rpm/centos/sqlite@3.7.17-8.el7?arch=x86_64&distro=centos-7&upstream=sqlite-3.7.17-8.el7.src.rpm","type":"rpm","version":"3.7.17-8.el7","language":"","licenses":["Public Domain"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-19244","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"sqlite","version":"0:3.7.17-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-19244","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-19244","date":"2026-10-08","epss":0.03333,"percentile":0.88292}],"risk":1.749825,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-19244","description":"A flaw was found in the way SQLite handled certain types of SQL queries using DISTINCT, OVER and ORDER BY clauses. A remote attacker could exploit this flaw by providing a malicious SQL query that, when processed by an application linked to SQLite, would crash the application causing a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2019-19244","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-19244","date":"2026-10-08","epss":0.03333,"percentile":0.88292}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://github.com/sqlite/sqlite/commit/e59c562b3f6894f84c715772c4b116d7b5c01348","https://usn.ubuntu.com/4205-1/","https://www.oracle.com/security-alerts/cpuapr2020.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-19244","description":"sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-322.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-25013","versionConstraint":"< 0:2.17-322.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-25013","fix":{"state":"fixed","versions":["0:2.17-322.el7_9"],"available":[{"date":"2021-02-05","kind":"first-observed","version":"0:2.17-322.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.8,"impactScore":3.6,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-25013","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-25013","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-25013","date":"2026-10-08","epss":0.03565,"percentile":0.89034}],"risk":1.7468500000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:0348","link":"https://access.redhat.com/errata/RHSA-2021:0348"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-25013","description":"A flaw was found in glibc. When processing input in the EUC-KR encoding, an invalid input sequence could cause glibc to read beyond the end of a buffer, resulting in a segmentation fault. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2019-25013","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-25013","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-25013","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-25013","date":"2026-10-08","epss":0.03565,"percentile":0.89034}],"urls":["https://lists.apache.org/thread.html/r32d767ac804e9b8aad4355bb85960a6a1385eab7afff549a5e98660f%40%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r448bb851cc8e6e3f93f3c28c70032b37062625d81214744474ac49e7%40%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/r4806a391091e082bdea17266452ca656ebc176e51bb3932733b3a0a2%40%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r499e4f96d0b5109ef083f2feccd33c51650c1b7d7068aa3bd47efca9%40%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r5af4430421bb6f9973294691a7904bbd260937e9eef96b20556f43ff%40%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r750eee18542bc02bd8350861c424ee60a9b9b225568fa09436a37ece%40%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r7a2e94adfe0a2f0a1d42e4927e8c32ecac97d37db9cb68095fe9ddbc%40%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rd2354f9ccce41e494fbadcbc5ad87218de6ec0fff8a7b54c8462226c%40%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4Y6TX47P47KABSFOL26FLDNVCWXDKDEZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVCUNLQ3HXGS4VPUQKWTJGRAW2KTFGXS/","https://security.gentoo.org/glsa/202107-07","https://security.netapp.com/advisory/ntap-20210205-0004/","https://sourceware.org/bugzilla/show_bug.cgi?id=24973","https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=ee7a3144c9922808181009b7b3e50e852fb4999b","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-25013","description":"The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-322.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-25013","versionConstraint":"< 0:2.17-322.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-25013","fix":{"state":"fixed","versions":["0:2.17-322.el7_9"],"available":[{"date":"2021-02-05","kind":"first-observed","version":"0:2.17-322.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.8,"impactScore":3.6,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-25013","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-25013","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-25013","date":"2026-10-08","epss":0.03565,"percentile":0.89034}],"risk":1.7468500000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:0348","link":"https://access.redhat.com/errata/RHSA-2021:0348"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-25013","description":"A flaw was found in glibc. When processing input in the EUC-KR encoding, an invalid input sequence could cause glibc to read beyond the end of a buffer, resulting in a segmentation fault. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2019-25013","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-25013","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-25013","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-25013","date":"2026-10-08","epss":0.03565,"percentile":0.89034}],"urls":["https://lists.apache.org/thread.html/r32d767ac804e9b8aad4355bb85960a6a1385eab7afff549a5e98660f%40%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r448bb851cc8e6e3f93f3c28c70032b37062625d81214744474ac49e7%40%3Cdev.kafka.apache.org%3E","https://lists.apache.org/thread.html/r4806a391091e082bdea17266452ca656ebc176e51bb3932733b3a0a2%40%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r499e4f96d0b5109ef083f2feccd33c51650c1b7d7068aa3bd47efca9%40%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r5af4430421bb6f9973294691a7904bbd260937e9eef96b20556f43ff%40%3Cjira.kafka.apache.org%3E","https://lists.apache.org/thread.html/r750eee18542bc02bd8350861c424ee60a9b9b225568fa09436a37ece%40%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/r7a2e94adfe0a2f0a1d42e4927e8c32ecac97d37db9cb68095fe9ddbc%40%3Cdev.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rd2354f9ccce41e494fbadcbc5ad87218de6ec0fff8a7b54c8462226c%40%3Cissues.zookeeper.apache.org%3E","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4Y6TX47P47KABSFOL26FLDNVCWXDKDEZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVCUNLQ3HXGS4VPUQKWTJGRAW2KTFGXS/","https://security.gentoo.org/glsa/202107-07","https://security.netapp.com/advisory/ntap-20210205-0004/","https://sourceware.org/bugzilla/show_bug.cgi?id=24973","https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=ee7a3144c9922808181009b7b3e50e852fb4999b","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-25013","description":"The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read."}]},{"artifact":{"id":"a46b4702cba559de","cpes":["cpe:2.3:a:centos:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss","purl":"pkg:rpm/centos/nss@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-7.el7_7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-11729","versionConstraint":"< 0:3.44.0-7.el7_7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"0:3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-11729","fix":{"state":"fixed","versions":["0:3.44.0-7.el7_7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:3.44.0-7.el7_7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11729","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11729","date":"2026-10-08","epss":0.02794,"percentile":0.86015}],"risk":1.7462499999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:4190","link":"https://access.redhat.com/errata/RHSA-2019:4190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-11729","description":"Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8."},"relatedVulnerabilities":[{"id":"CVE-2019-11729","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11729","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11729","date":"2026-10-08","epss":0.02794,"percentile":0.86015}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html","http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html","https://access.redhat.com/errata/RHSA-2019:1951","https://access.redhat.com/errata/RHSA-2019:4190","https://bugzilla.mozilla.org/show_bug.cgi?id=1515342","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://security.gentoo.org/glsa/201908-12","https://security.gentoo.org/glsa/201908-20","https://www.mozilla.org/security/advisories/mfsa2019-21/","https://www.mozilla.org/security/advisories/mfsa2019-22/","https://www.mozilla.org/security/advisories/mfsa2019-23/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-11729","description":"Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8."}]},{"artifact":{"id":"92876d71e73259d4","cpes":["cpe:2.3:a:nss-softokn:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_softokn:3.28.3-8.el7_4:*:*:*:*:*:*:*"],"name":"nss-softokn","purl":"pkg:rpm/centos/nss-softokn@3.28.3-8.el7_4?arch=x86_64&distro=centos-7&upstream=nss-softokn-3.28.3-8.el7_4.src.rpm","type":"rpm","version":"3.28.3-8.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-8.el7_7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-11729","versionConstraint":"< 0:3.44.0-8.el7_7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-softokn","version":"0:3.28.3-8.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-11729","fix":{"state":"fixed","versions":["0:3.44.0-8.el7_7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:3.44.0-8.el7_7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11729","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11729","date":"2026-10-08","epss":0.02794,"percentile":0.86015}],"risk":1.7462499999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:4190","link":"https://access.redhat.com/errata/RHSA-2019:4190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-11729","description":"Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8."},"relatedVulnerabilities":[{"id":"CVE-2019-11729","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11729","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11729","date":"2026-10-08","epss":0.02794,"percentile":0.86015}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html","http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html","https://access.redhat.com/errata/RHSA-2019:1951","https://access.redhat.com/errata/RHSA-2019:4190","https://bugzilla.mozilla.org/show_bug.cgi?id=1515342","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://security.gentoo.org/glsa/201908-12","https://security.gentoo.org/glsa/201908-20","https://www.mozilla.org/security/advisories/mfsa2019-21/","https://www.mozilla.org/security/advisories/mfsa2019-22/","https://www.mozilla.org/security/advisories/mfsa2019-23/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-11729","description":"Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8."}]},{"artifact":{"id":"25cd735f603572c2","cpes":["cpe:2.3:a:nss-softokn-freebl:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn-freebl:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn_freebl:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn_freebl:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-softokn:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_softokn:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-softokn-freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_softokn_freebl:3.28.3-8.el7_4:*:*:*:*:*:*:*"],"name":"nss-softokn-freebl","purl":"pkg:rpm/centos/nss-softokn-freebl@3.28.3-8.el7_4?arch=x86_64&distro=centos-7&upstream=nss-softokn-3.28.3-8.el7_4.src.rpm","type":"rpm","version":"3.28.3-8.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss-softokn","version":"3.28.3-8.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-8.el7_7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-11729","versionConstraint":"< 0:3.44.0-8.el7_7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-softokn","version":"3.28.3-8.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-11729","fix":{"state":"fixed","versions":["0:3.44.0-8.el7_7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:3.44.0-8.el7_7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11729","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11729","date":"2026-10-08","epss":0.02794,"percentile":0.86015}],"risk":1.7462499999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:4190","link":"https://access.redhat.com/errata/RHSA-2019:4190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-11729","description":"Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8."},"relatedVulnerabilities":[{"id":"CVE-2019-11729","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11729","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11729","date":"2026-10-08","epss":0.02794,"percentile":0.86015}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html","http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html","https://access.redhat.com/errata/RHSA-2019:1951","https://access.redhat.com/errata/RHSA-2019:4190","https://bugzilla.mozilla.org/show_bug.cgi?id=1515342","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://security.gentoo.org/glsa/201908-12","https://security.gentoo.org/glsa/201908-20","https://www.mozilla.org/security/advisories/mfsa2019-21/","https://www.mozilla.org/security/advisories/mfsa2019-22/","https://www.mozilla.org/security/advisories/mfsa2019-23/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-11729","description":"Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8."}]},{"artifact":{"id":"4f9adc24f7b50922","cpes":["cpe:2.3:a:nss-sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_sysinit:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_sysinit:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-sysinit","purl":"pkg:rpm/centos/nss-sysinit@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-7.el7_7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-11729","versionConstraint":"< 0:3.44.0-7.el7_7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-11729","fix":{"state":"fixed","versions":["0:3.44.0-7.el7_7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:3.44.0-7.el7_7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11729","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11729","date":"2026-10-08","epss":0.02794,"percentile":0.86015}],"risk":1.7462499999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:4190","link":"https://access.redhat.com/errata/RHSA-2019:4190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-11729","description":"Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8."},"relatedVulnerabilities":[{"id":"CVE-2019-11729","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11729","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11729","date":"2026-10-08","epss":0.02794,"percentile":0.86015}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html","http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html","https://access.redhat.com/errata/RHSA-2019:1951","https://access.redhat.com/errata/RHSA-2019:4190","https://bugzilla.mozilla.org/show_bug.cgi?id=1515342","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://security.gentoo.org/glsa/201908-12","https://security.gentoo.org/glsa/201908-20","https://www.mozilla.org/security/advisories/mfsa2019-21/","https://www.mozilla.org/security/advisories/mfsa2019-22/","https://www.mozilla.org/security/advisories/mfsa2019-23/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-11729","description":"Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8."}]},{"artifact":{"id":"00bceaeaf4078fe2","cpes":["cpe:2.3:a:nss-tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss-tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss_tools:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-tools:3.28.4-15.el7_4:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_tools:3.28.4-15.el7_4:*:*:*:*:*:*:*"],"name":"nss-tools","purl":"pkg:rpm/centos/nss-tools@3.28.4-15.el7_4?arch=x86_64&distro=centos-7&upstream=nss-3.28.4-15.el7_4.src.rpm","type":"rpm","version":"3.28.4-15.el7_4","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nss","version":"3.28.4-15.el7_4"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-7.el7_7"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-11729","versionConstraint":"< 0:3.44.0-7.el7_7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss","version":"3.28.4-15.el7_4"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-11729","fix":{"state":"fixed","versions":["0:3.44.0-7.el7_7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:3.44.0-7.el7_7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11729","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11729","date":"2026-10-08","epss":0.02794,"percentile":0.86015}],"risk":1.7462499999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:4190","link":"https://access.redhat.com/errata/RHSA-2019:4190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-11729","description":"Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8."},"relatedVulnerabilities":[{"id":"CVE-2019-11729","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11729","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11729","date":"2026-10-08","epss":0.02794,"percentile":0.86015}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html","http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html","https://access.redhat.com/errata/RHSA-2019:1951","https://access.redhat.com/errata/RHSA-2019:4190","https://bugzilla.mozilla.org/show_bug.cgi?id=1515342","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://security.gentoo.org/glsa/201908-12","https://security.gentoo.org/glsa/201908-20","https://www.mozilla.org/security/advisories/mfsa2019-21/","https://www.mozilla.org/security/advisories/mfsa2019-22/","https://www.mozilla.org/security/advisories/mfsa2019-23/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-11729","description":"Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8."}]},{"artifact":{"id":"4b9171b2fdf0504a","cpes":["cpe:2.3:a:nss-util:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss-util:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_util:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss_util:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss-util:3.28.4-3.el7:*:*:*:*:*:*:*","cpe:2.3:a:nss:nss_util:3.28.4-3.el7:*:*:*:*:*:*:*"],"name":"nss-util","purl":"pkg:rpm/centos/nss-util@3.28.4-3.el7?arch=x86_64&distro=centos-7&upstream=nss-util-3.28.4-3.el7.src.rpm","type":"rpm","version":"3.28.4-3.el7","language":"","licenses":["MPLv2.0"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:3.44.0-4.el7_7"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2019-11729","versionConstraint":"< 0:3.44.0-4.el7_7 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"nss-util","version":"0:3.28.4-3.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2019-11729","fix":{"state":"fixed","versions":["0:3.44.0-4.el7_7"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:3.44.0-4.el7_7"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11729","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11729","date":"2026-10-08","epss":0.02794,"percentile":0.86015}],"risk":1.7462499999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:4190","link":"https://access.redhat.com/errata/RHSA-2019:4190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2019-11729","description":"Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8."},"relatedVulnerabilities":[{"id":"CVE-2019-11729","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-11729","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-11729","date":"2026-10-08","epss":0.02794,"percentile":0.86015}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html","http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html","http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html","https://access.redhat.com/errata/RHSA-2019:1951","https://access.redhat.com/errata/RHSA-2019:4190","https://bugzilla.mozilla.org/show_bug.cgi?id=1515342","https://lists.debian.org/debian-lts-announce/2020/09/msg00029.html","https://security.gentoo.org/glsa/201908-12","https://security.gentoo.org/glsa/201908-20","https://www.mozilla.org/security/advisories/mfsa2019-21/","https://www.mozilla.org/security/advisories/mfsa2019-22/","https://www.mozilla.org/security/advisories/mfsa2019-23/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-11729","description":"Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8."}]},{"artifact":{"id":"74815ef1ea59fa2c","cpes":["cpe:2.3:a:centos:pcre:8.32-17.el7:*:*:*:*:*:*:*","cpe:2.3:a:pcre:pcre:8.32-17.el7:*:*:*:*:*:*:*"],"name":"pcre","purl":"pkg:rpm/centos/pcre@8.32-17.el7?arch=x86_64&distro=centos-7&upstream=pcre-8.32-17.el7.src.rpm","type":"rpm","version":"8.32-17.el7","language":"","licenses":["BSD"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-14155","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"pcre","version":"0:8.32-17.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-14155","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-14155","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-14155","date":"2026-10-08","epss":0.04182,"percentile":0.90662}],"risk":1.7355300000000005,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-14155","description":"libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring."},"relatedVulnerabilities":[{"id":"CVE-2020-14155","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-14155","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-14155","date":"2026-10-08","epss":0.04182,"percentile":0.90662}],"urls":["http://seclists.org/fulldisclosure/2020/Dec/32","http://seclists.org/fulldisclosure/2021/Feb/14","https://about.gitlab.com/releases/2020/07/01/security-release-13-1-2-release/","https://bugs.gentoo.org/717920","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://security.netapp.com/advisory/ntap-20221028-0010/","https://support.apple.com/kb/HT211931","https://support.apple.com/kb/HT212147","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.pcre.org/original/changelog.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-14155","description":"libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring."}]},{"artifact":{"id":"4b1e95d2b4f6f606","cpes":["cpe:2.3:a:centos:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*","cpe:2.3:a:expat:expat:2.1.0-10.el7_3:*:*:*:*:*:*:*"],"name":"expat","purl":"pkg:rpm/centos/expat@2.1.0-10.el7_3?arch=x86_64&distro=centos-7&upstream=expat-2.1.0-10.el7_3.src.rpm","type":"rpm","version":"2.1.0-10.el7_3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.1.0-15.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-40674","versionConstraint":"< 0:2.1.0-15.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"expat","version":"0:2.1.0-10.el7_3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-40674","fix":{"state":"fixed","versions":["0:2.1.0-15.el7_9"],"available":[{"date":"2022-10-07","kind":"first-observed","version":"0:2.1.0-15.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40674","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-40674","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-40674","date":"2026-10-08","epss":0.02223,"percentile":0.82161}],"risk":1.73394,"urls":[],"severity":"High","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:6834","link":"https://access.redhat.com/errata/RHSA-2022:6834"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-40674","description":"A vulnerability was found in expat. With this flaw, it is possible to create a situation in which parsing is suspended while substituting in an internal entity so that XML_ResumeParser directly uses the internalEntityProcessor as its processor. If the subsequent parse includes some unclosed tags, this will return without calling storeRawNames to ensure that the raw versions of the tag names are stored in memory other than the parse buffer itself. Issues occur if the parse buffer is changed or reallocated (for example, if processing a file line by line), problems occur. Using this vulnerability in the doContent function allows an attacker to triage a denial of service or potentially arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2022-40674","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-40674","cwe":"CWE-416","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-40674","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-40674","date":"2026-10-08","epss":0.02223,"percentile":0.82161}],"urls":["https://github.com/libexpat/libexpat/pull/629","https://github.com/libexpat/libexpat/pull/640","https://lists.debian.org/debian-lts-announce/2022/09/msg00029.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GSVZN3IJ6OCPSJL7AEX3ZHSHAHFOGESK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J2IGJNHFV53PYST7VQV3T4NHVYAMXA36/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LQB6FJAM5YQ35SF5B2MN25Y2FX56EOEZ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2ZKEPGFCZ7R6DRVH3K6RBJPT42ZBEG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XCGBVQQ47URGJAZWHCISHDWF6QBTV2LE/","https://security.gentoo.org/glsa/202209-24","https://security.gentoo.org/glsa/202211-06","https://security.netapp.com/advisory/ntap-20221028-0008/","https://www.debian.org/security/2022/dsa-5236"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-40674","description":"libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2016-9318","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-9318","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L","metrics":{"baseScore":6.7,"impactScore":4.8,"exploitabilityScore":1.5},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9318","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-9318","cwe":"CWE-611","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-9318","date":"2026-10-08","epss":0.02938,"percentile":0.86707}],"risk":1.7187299999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-9318","description":"libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document."},"relatedVulnerabilities":[{"id":"CVE-2016-9318","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9318","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-9318","cwe":"CWE-611","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-9318","date":"2026-10-08","epss":0.02938,"percentile":0.86707}],"urls":["http://www.securityfocus.com/bid/94347","https://bugzilla.gnome.org/show_bug.cgi?id=772726","https://github.com/lsh123/xmlsec/issues/43","https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html","https://security.gentoo.org/glsa/201711-01","https://usn.ubuntu.com/3739-1/","https://usn.ubuntu.com/3739-2/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-9318","description":"libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-9318","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2016-9318","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L","metrics":{"baseScore":6.7,"impactScore":4.8,"exploitabilityScore":1.5},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9318","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-9318","cwe":"CWE-611","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-9318","date":"2026-10-08","epss":0.02938,"percentile":0.86707}],"risk":1.7187299999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2016-9318","description":"libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document."},"relatedVulnerabilities":[{"id":"CVE-2016-9318","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9318","cwe":"CWE-611","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-9318","cwe":"CWE-611","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-9318","date":"2026-10-08","epss":0.02938,"percentile":0.86707}],"urls":["http://www.securityfocus.com/bid/94347","https://bugzilla.gnome.org/show_bug.cgi?id=772726","https://github.com/lsh123/xmlsec/issues/43","https://lists.debian.org/debian-lts-announce/2022/04/msg00004.html","https://security.gentoo.org/glsa/201711-01","https://usn.ubuntu.com/3739-1/","https://usn.ubuntu.com/3739-2/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-9318","description":"libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-24977","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-24977","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-24977","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-24977","date":"2026-10-08","epss":0.02976,"percentile":0.86865}],"risk":1.7111999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-24977","description":"GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e."},"relatedVulnerabilities":[{"id":"CVE-2020-24977","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-24977","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-24977","date":"2026-10-08","epss":0.02976,"percentile":0.86865}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00036.html","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00061.html","https://gitlab.gnome.org/GNOME/libxml2/-/commit/50f06b3efb638efb0abd95dc62dca05ae67882c2","https://gitlab.gnome.org/GNOME/libxml2/-/issues/178","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2NQ5GTDYOVH26PBCPYXXMGW5ZZXWMGZC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5KTUAGDLEHTH6HU66HBFAFTSQ3OKRAN3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/674LQPJO2P2XTBTREFR5LOZMBTZ4PZAY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KQXOHIE3MNY3VQXEN7LDQUJNIHOVHAW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ENEHQIBMSI6TZVS35Y6I4FCTYUQDLJVP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3IQ7OQXBKWD3YP7HO6KCNOMLE5ZO2IR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3ICASXZI2UQYFJAOQWHSTNWGED3VXOE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCHXIWR5DHYO3RSO7RAHEC6VJKXD2EH2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O7MEWYKIKMV2SKMGH4IDWVU3ZGJXBCPQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RIQAMBA2IJUTQG5VOP5LZVIZRNCKXHEQ/","https://security.gentoo.org/glsa/202107-05","https://security.netapp.com/advisory/ntap-20200924-0001/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-24977","description":"GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-24977","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-24977","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-24977","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-24977","date":"2026-10-08","epss":0.02976,"percentile":0.86865}],"risk":1.7111999999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-24977","description":"GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e."},"relatedVulnerabilities":[{"id":"CVE-2020-24977","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","metrics":{"baseScore":6.4,"impactScore":5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-24977","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-24977","date":"2026-10-08","epss":0.02976,"percentile":0.86865}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00036.html","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00061.html","https://gitlab.gnome.org/GNOME/libxml2/-/commit/50f06b3efb638efb0abd95dc62dca05ae67882c2","https://gitlab.gnome.org/GNOME/libxml2/-/issues/178","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2NQ5GTDYOVH26PBCPYXXMGW5ZZXWMGZC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5KTUAGDLEHTH6HU66HBFAFTSQ3OKRAN3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/674LQPJO2P2XTBTREFR5LOZMBTZ4PZAY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KQXOHIE3MNY3VQXEN7LDQUJNIHOVHAW/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ENEHQIBMSI6TZVS35Y6I4FCTYUQDLJVP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3IQ7OQXBKWD3YP7HO6KCNOMLE5ZO2IR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3ICASXZI2UQYFJAOQWHSTNWGED3VXOE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCHXIWR5DHYO3RSO7RAHEC6VJKXD2EH2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O7MEWYKIKMV2SKMGH4IDWVU3ZGJXBCPQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RIQAMBA2IJUTQG5VOP5LZVIZRNCKXHEQ/","https://security.gentoo.org/glsa/202107-05","https://security.netapp.com/advisory/ntap-20200924-0001/","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-24977","description":"GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e."}]},{"artifact":{"id":"e9ef20ff420964f4","cpes":["cpe:2.3:a:bind-license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind-license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind_license:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_license:32\\:9.9.4-51.el7:*:*:*:*:*:*:*"],"name":"bind-license","purl":"pkg:rpm/centos/bind-license@9.9.4-51.el7?arch=noarch&distro=centos-7&epoch=32&upstream=bind-9.9.4-51.el7.src.rpm","type":"rpm","version":"32:9.9.4-51.el7","language":"","licenses":["ISC"],"metadata":{"epoch":32,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind","version":"9.9.4-51.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"32:9.11.4-26.P2.el7_9.2"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-8624","versionConstraint":"< 32:9.11.4-26.P2.el7_9.2 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"bind","version":"9.9.4-51.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-8624","fix":{"state":"fixed","versions":["32:9.11.4-26.P2.el7_9.2"],"available":[{"date":"2020-11-11","kind":"first-observed","version":"32:9.11.4-26.P2.el7_9.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8624","cwe":"CWE-269","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8624","date":"2026-10-08","epss":0.0367,"percentile":0.89354}],"risk":1.70655,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:5011","link":"https://access.redhat.com/errata/RHSA-2020:5011"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-8624","description":"A flaw was found in bind. Updates to  \"Update-policy\" rules of type \"subdomain\" are treated as if they were of type \"zonesub\" which allows updates to all parts of the zone along with the intended subdomain. The highest threat from this vulnerability is to data integrity."},"relatedVulnerabilities":[{"id":"CVE-2020-8624","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-8624","cwe":"CWE-269","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-8624","date":"2026-10-08","epss":0.0367,"percentile":0.89354}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html","http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html","https://kb.isc.org/docs/cve-2020-8624","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQN62GBMCIC5AY4KYADGXNKVY6AJKSJE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKAMJZXR66P6S5LEU4SN7USSNCWTXEXP/","https://security.gentoo.org/glsa/202008-19","https://security.netapp.com/advisory/ntap-20200827-0003/","https://usn.ubuntu.com/4468-1/","https://www.debian.org/security/2020/dsa-4752","https://www.synology.com/security/advisory/Synology_SA_20_19"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-8624","description":"In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents of the zone."}]},{"artifact":{"id":"8cff80759e301416","cpes":["cpe:2.3:a:centos:glibc:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc","purl":"pkg:rpm/centos/glibc@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-322.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-29573","versionConstraint":"< 0:2.17-322.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"0:2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-29573","fix":{"state":"fixed","versions":["0:2.17-322.el7_9"],"available":[{"date":"2021-02-05","kind":"first-observed","version":"0:2.17-322.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-29573","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-29573","date":"2026-10-08","epss":0.02723,"percentile":0.85617}],"risk":1.7018749999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:0348","link":"https://access.redhat.com/errata/RHSA-2021:0348"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-29573","description":"A stack buffer overflow flaw was found in glibc in the way the printf family of functions processed an 80-bit long double with a non-canonical bit pattern. This flaw allows an attacker who can control the arguments of these functions with the non-standard long double pattern to trigger an overflow and cause an application crash. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-29573","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-29573","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-29573","date":"2026-10-08","epss":0.02723,"percentile":0.85617}],"urls":["https://security.gentoo.org/glsa/202101-20","https://security.netapp.com/advisory/ntap-20210122-0004/","https://sourceware.org/bugzilla/show_bug.cgi?id=26649","https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-29573","description":"sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a \\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x04 value to sprintf. NOTE: the issue does not affect glibc by default in 2016 or later (i.e., 2.23 or later) because of commits made in 2015 for inlining of C99 math functions through use of GCC built-ins. In other words, the reference to 2.23 is intentional despite the mention of \"Fixed for glibc 2.33\" in the 26649 reference."}]},{"artifact":{"id":"6ade1cfa87933a84","cpes":["cpe:2.3:a:glibc-common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc-common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc_common:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:glibc_common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc-common:2.17-196.el7:*:*:*:*:*:*:*","cpe:2.3:a:glibc:glibc_common:2.17-196.el7:*:*:*:*:*:*:*"],"name":"glibc-common","purl":"pkg:rpm/centos/glibc-common@2.17-196.el7?arch=x86_64&distro=centos-7&upstream=glibc-2.17-196.el7.src.rpm","type":"rpm","version":"2.17-196.el7","language":"","licenses":["LGPLv2+ and LGPLv2+ with exceptions and GPLv2+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"glibc","version":"2.17-196.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.17-322.el7_9"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-29573","versionConstraint":"< 0:2.17-322.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"glibc","version":"2.17-196.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-29573","fix":{"state":"fixed","versions":["0:2.17-322.el7_9"],"available":[{"date":"2021-02-05","kind":"first-observed","version":"0:2.17-322.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-29573","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-29573","date":"2026-10-08","epss":0.02723,"percentile":0.85617}],"risk":1.7018749999999998,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2021:0348","link":"https://access.redhat.com/errata/RHSA-2021:0348"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-29573","description":"A stack buffer overflow flaw was found in glibc in the way the printf family of functions processed an 80-bit long double with a non-canonical bit pattern. This flaw allows an attacker who can control the arguments of these functions with the non-standard long double pattern to trigger an overflow and cause an application crash. The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-29573","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-29573","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-29573","date":"2026-10-08","epss":0.02723,"percentile":0.85617}],"urls":["https://security.gentoo.org/glsa/202101-20","https://security.netapp.com/advisory/ntap-20210122-0004/","https://sourceware.org/bugzilla/show_bug.cgi?id=26649","https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-29573","description":"sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a \\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x04 value to sprintf. NOTE: the issue does not affect glibc by default in 2016 or later (i.e., 2.23 or later) because of commits made in 2015 for inlining of C99 math functions through use of GCC built-ins. In other words, the reference to 2.23 is intentional despite the mention of \"Fixed for glibc 2.33\" in the 26649 reference."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1:1.0.2k-16.el7_6.1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-5407","versionConstraint":"< 1:1.0.2k-16.el7_6.1 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2018-5407","fix":{"state":"fixed","versions":["1:1.0.2k-16.el7_6.1"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"1:1.0.2k-16.el7_6.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":4.8,"impactScore":4,"exploitabilityScore":0.5},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-5407","cwe":"CWE-200","type":"Secondary","source":"cret@cert.org"},{"cve":"CVE-2018-5407","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-5407","date":"2026-10-08","epss":0.03418,"percentile":0.88567}],"risk":1.6748200000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2019:0483","link":"https://access.redhat.com/errata/RHSA-2019:0483"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2018-5407","description":"A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information."},"relatedVulnerabilities":[{"id":"CVE-2018-5407","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":1.9,"impactScore":2.9,"exploitabilityScore":3.4},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-5407","cwe":"CWE-200","type":"Secondary","source":"cret@cert.org"},{"cve":"CVE-2018-5407","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-5407","date":"2026-10-08","epss":0.03418,"percentile":0.88567}],"urls":["http://www.securityfocus.com/bid/105897","https://access.redhat.com/errata/RHSA-2019:0483","https://access.redhat.com/errata/RHSA-2019:0651","https://access.redhat.com/errata/RHSA-2019:0652","https://access.redhat.com/errata/RHSA-2019:2125","https://access.redhat.com/errata/RHSA-2019:3929","https://access.redhat.com/errata/RHSA-2019:3931","https://access.redhat.com/errata/RHSA-2019:3932","https://access.redhat.com/errata/RHSA-2019:3933","https://access.redhat.com/errata/RHSA-2019:3935","https://eprint.iacr.org/2018/1060.pdf","https://github.com/bbbrumley/portsmash","https://lists.debian.org/debian-lts-announce/2018/11/msg00024.html","https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","https://security.gentoo.org/glsa/201903-10","https://security.netapp.com/advisory/ntap-20181126-0001/","https://support.f5.com/csp/article/K49711130?utm_source=f5support&amp%3Butm_medium=RSS","https://usn.ubuntu.com/3840-1/","https://www.debian.org/security/2018/dsa-4348","https://www.debian.org/security/2018/dsa-4355","https://www.exploit-db.com/exploits/45785/","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/security-alerts/cpujan2020.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.tenable.com/security/tns-2018-16","https://www.tenable.com/security/tns-2018-17"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-5407","description":"Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'."}]},{"artifact":{"id":"077a7ba2000fcf01","cpes":["cpe:2.3:a:centos:curl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:curl:curl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:rpm/centos/curl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-22947","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"0:7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-22947","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.1,"impactScore":4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22947","cwe":"CWE-310","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22947","cwe":"CWE-345","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-22947","date":"2026-10-08","epss":0.03009,"percentile":0.87008}],"risk":1.669995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-22947","description":"A flaw was found in curl. The flaw lies in how curl handles cached or pipelined responses that it receives from either a IMAP, POP3, SMTP or FTP server before the TLS upgrade using STARTTLS. In such a scenario curl even after upgrading to TLS would trust these cached responses treating them as valid and authenticated and use them. An attacker could potentially use this flaw to carry out a Man-In-The-Middle attack. The highest threat from this vulnerability is to data confidentiality."},"relatedVulnerabilities":[{"id":"CVE-2021-22947","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22947","cwe":"CWE-310","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22947","cwe":"CWE-345","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-22947","date":"2026-10-08","epss":0.03009,"percentile":0.87008}],"urls":["http://seclists.org/fulldisclosure/2022/Mar/29","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://hackerone.com/reports/1334763","https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html","https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/","https://security.gentoo.org/glsa/202212-01","https://security.netapp.com/advisory/ntap-20211029-0003/","https://support.apple.com/kb/HT213183","https://www.debian.org/security/2022/dsa-5197","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-22947","description":"When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of cached responses but instead continue using and trustingthe responses it got *before* the TLS handshake as if they were authenticated.Using this flaw, it allows a Man-In-The-Middle attacker to first inject the fake responses, then pass-through the TLS traffic from the legitimate server and trick curl into sending data back to the user thinking the attacker's injected data comes from the TLS-protected server."}]},{"artifact":{"id":"200b6345fd328537","cpes":["cpe:2.3:a:libcurl:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:libcurl:7.29.0-42.el7:*:*:*:*:*:*:*"],"name":"libcurl","purl":"pkg:rpm/centos/libcurl@7.29.0-42.el7?arch=x86_64&distro=centos-7&upstream=curl-7.29.0-42.el7.src.rpm","type":"rpm","version":"7.29.0-42.el7","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"curl","version":"7.29.0-42.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-22947","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"curl","version":"7.29.0-42.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-22947","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.1,"impactScore":4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22947","cwe":"CWE-310","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22947","cwe":"CWE-345","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-22947","date":"2026-10-08","epss":0.03009,"percentile":0.87008}],"risk":1.669995,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-22947","description":"A flaw was found in curl. The flaw lies in how curl handles cached or pipelined responses that it receives from either a IMAP, POP3, SMTP or FTP server before the TLS upgrade using STARTTLS. In such a scenario curl even after upgrading to TLS would trust these cached responses treating them as valid and authenticated and use them. An attacker could potentially use this flaw to carry out a Man-In-The-Middle attack. The highest threat from this vulnerability is to data confidentiality."},"relatedVulnerabilities":[{"id":"CVE-2021-22947","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-22947","cwe":"CWE-310","type":"Secondary","source":"support@hackerone.com"},{"cve":"CVE-2021-22947","cwe":"CWE-345","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-22947","date":"2026-10-08","epss":0.03009,"percentile":0.87008}],"urls":["http://seclists.org/fulldisclosure/2022/Mar/29","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://hackerone.com/reports/1334763","https://lists.debian.org/debian-lts-announce/2021/09/msg00022.html","https://lists.debian.org/debian-lts-announce/2022/08/msg00017.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APOAK4X73EJTAPTSVT7IRVDMUWVXNWGD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RWLEC6YVEM2HWUBX67SDGPSY4CQB72OE/","https://security.gentoo.org/glsa/202212-01","https://security.netapp.com/advisory/ntap-20211029-0003/","https://support.apple.com/kb/HT213183","https://www.debian.org/security/2022/dsa-5197","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujan2022.html","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.oracle.com/security-alerts/cpuoct2021.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-22947","description":"When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of cached responses but instead continue using and trustingthe responses it got *before* the TLS handshake as if they were authenticated.Using this flaw, it allows a Man-In-The-Middle attacker to first inject the fake responses, then pass-through the TLS traffic from the legitimate server and trick curl into sending data back to the user thinking the attacker's injected data comes from the TLS-protected server."}]},{"artifact":{"id":"2439f8bce118b50f","cpes":["cpe:2.3:a:centos:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:sqlite:sqlite:3.7.17-8.el7:*:*:*:*:*:*:*"],"name":"sqlite","purl":"pkg:rpm/centos/sqlite@3.7.17-8.el7?arch=x86_64&distro=centos-7&upstream=sqlite-3.7.17-8.el7.src.rpm","type":"rpm","version":"3.7.17-8.el7","language":"","licenses":["Public Domain"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2017-7000","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"sqlite","version":"0:3.7.17-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2017-7000","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-7000","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-7000","date":"2026-10-08","epss":0.02902,"percentile":0.86547}],"risk":1.66865,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2017-7000","description":"An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."},"relatedVulnerabilities":[{"id":"CVE-2017-7000","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-7000","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-7000","date":"2026-10-08","epss":0.02902,"percentile":0.86547}],"urls":["http://www.securityfocus.com/bid/98767","http://www.securityfocus.com/bid/99950","https://access.redhat.com/errata/RHSA-2017:1833","https://security.gentoo.org/glsa/201709-15","https://support.apple.com/HT207797","https://support.apple.com/HT207798","https://www.debian.org/security/2017/dsa-3926"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-7000","description":"An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site."}]},{"artifact":{"id":"82939d6647fa4170","cpes":["cpe:2.3:a:openldap:openldap:2.4.44-5.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openldap:2.4.44-5.el7:*:*:*:*:*:*:*"],"name":"openldap","purl":"pkg:rpm/centos/openldap@2.4.44-5.el7?arch=x86_64&distro=centos-7&upstream=openldap-2.4.44-5.el7.src.rpm","type":"rpm","version":"2.4.44-5.el7","language":"","licenses":["OpenLDAP"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.4.44-25.el7_9"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2020-25710","versionConstraint":"< 0:2.4.44-25.el7_9 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openldap","version":"0:2.4.44-5.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2020-25710","fix":{"state":"fixed","versions":["0:2.4.44-25.el7_9"],"available":[{"date":"2022-02-23","kind":"first-observed","version":"0:2.4.44-25.el7_9"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-25710","cwe":"CWE-617","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2020-25710","date":"2026-10-08","epss":0.02666,"percentile":0.85292}],"risk":1.66625,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2022:0621","link":"https://access.redhat.com/errata/RHSA-2022:0621"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2020-25710","description":"A flaw was found in OpenLDAP. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability."},"relatedVulnerabilities":[{"id":"CVE-2020-25710","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-25710","cwe":"CWE-617","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2020-25710","date":"2026-10-08","epss":0.02666,"percentile":0.85292}],"urls":["https://bugzilla.redhat.com/show_bug.cgi?id=1899678","https://git.openldap.org/openldap/openldap/-/commit/ab3915154e69920d480205b4bf5ccb2b391a0a1f#a2feb6ed0257c21c6672793ee2f94eaadc10c72c","https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","https://lists.debian.org/debian-lts-announce/2020/12/msg00008.html","https://security.netapp.com/advisory/ntap-20210716-0003/","https://www.debian.org/security/2020/dsa-4792"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-25710","description":"A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-45061","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-45061","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45061","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-45061","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-45061","date":"2026-10-08","epss":0.02653,"percentile":0.85219}],"risk":1.6581250000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-45061","description":"A vulnerability was discovered in Python. A quadratic algorithm exists when processing inputs to the IDNA (RFC 3490) decoder, such that a crafted unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor, which could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied hostname."},"relatedVulnerabilities":[{"id":"CVE-2022-45061","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45061","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-45061","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-45061","date":"2026-10-08","epss":0.02653,"percentile":0.85219}],"urls":["https://github.com/python/cpython/issues/98433","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AOUKI72ACV6CHY2QUFO6VK2DNMVJ2MB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35YDIWCUMWTMDBWFRAVENFH6BLB65D6S/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WBZJNSALFGMPYTINIF57HAAK46U72WQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FS6VHY4DCS74HBTEINUDOECQ2X6ZCH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WQPHKGNXUJC3TC3BDW5RKGROWRJVSFR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3YI6JYARWU6GULWOHNUROSACT54XFFS/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4MYQ3IV6NWA4CKSXEHW45CH2YNDHEPH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BWJREJHWVRBYDP43YB5WRL3QC7UBA7BR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTPVDZDATRQFE6KAT6B4BQIQ4GRHIIIJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN26PWZTYG6IF3APLRXQJBVACQHZUPT2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCDJXNBHWXNYUTOEV4H2HCFSRKV3SYL3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTYVESWVBPD57ZJC35G5722Q6TS37WSB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KNE4GMD45RGC2HWUAAIGTDHT5VJ2E4O4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKWAMPURWUV3DCCT4J7VHRF4NT2CFVBR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O67LRHDTJWH544KXB6KY4HMHQLYDXFPK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORVCQGJCCAVLN4DJDTWGREFCUWXKQRML/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PLQ2BNZVBBAQPV3SPRU24ZD37UYJJS7W/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QCKD4AFBHXIMHS64ZER2U7QRT33HNE7L/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QLUGZSEAO3MBWGKCUSMKQIRYJZKJCIOB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDK3ZZBRYFO47ET3N4BNTKVXN47U6ICY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RH57BNT4VQERGEJ5SXNXSVMDYP66YD4H/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTN2OOLKYTG34DODUEJGT5MLC2PFGPBA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3D5TX4TDJPXHXD2QICKTY3OCQC3JARP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHVW73QZJMHA4MK7JBT7CXX7XSNYQEGF/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMDX6IFKLOA3NXUQEV524L5LHTPI2JI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3EJ6J7PXVQOULBQZQGBXCXY6LFF6LZD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXZJL3CNAFS5PAIR7K4RL62S3Y7THR7O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPNWZKXPKTNHS5FVMN7UQZ2UPCSEFJUK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB5YCMIRVX35RUB6XPOWKENCVCJEVDRK/","https://security.gentoo.org/glsa/202305-02","https://security.netapp.com/advisory/ntap-20221209-0007/","https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-3-12-0-alpha-3-are-now-available/21724"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-45061","description":"An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-45061","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2022-45061","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45061","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-45061","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-45061","date":"2026-10-08","epss":0.02653,"percentile":0.85219}],"risk":1.6581250000000003,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2022-45061","description":"A vulnerability was discovered in Python. A quadratic algorithm exists when processing inputs to the IDNA (RFC 3490) decoder, such that a crafted unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor, which could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied hostname."},"relatedVulnerabilities":[{"id":"CVE-2022-45061","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-45061","cwe":"CWE-407","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2022-45061","cwe":"CWE-407","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2022-45061","date":"2026-10-08","epss":0.02653,"percentile":0.85219}],"urls":["https://github.com/python/cpython/issues/98433","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AOUKI72ACV6CHY2QUFO6VK2DNMVJ2MB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35YDIWCUMWTMDBWFRAVENFH6BLB65D6S/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WBZJNSALFGMPYTINIF57HAAK46U72WQ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FS6VHY4DCS74HBTEINUDOECQ2X6ZCH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WQPHKGNXUJC3TC3BDW5RKGROWRJVSFR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3YI6JYARWU6GULWOHNUROSACT54XFFS/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4MYQ3IV6NWA4CKSXEHW45CH2YNDHEPH/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BWJREJHWVRBYDP43YB5WRL3QC7UBA7BR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTPVDZDATRQFE6KAT6B4BQIQ4GRHIIIJ/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN26PWZTYG6IF3APLRXQJBVACQHZUPT2/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCDJXNBHWXNYUTOEV4H2HCFSRKV3SYL3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTYVESWVBPD57ZJC35G5722Q6TS37WSB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KNE4GMD45RGC2HWUAAIGTDHT5VJ2E4O4/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKWAMPURWUV3DCCT4J7VHRF4NT2CFVBR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O67LRHDTJWH544KXB6KY4HMHQLYDXFPK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORVCQGJCCAVLN4DJDTWGREFCUWXKQRML/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PLQ2BNZVBBAQPV3SPRU24ZD37UYJJS7W/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QCKD4AFBHXIMHS64ZER2U7QRT33HNE7L/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QLUGZSEAO3MBWGKCUSMKQIRYJZKJCIOB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDK3ZZBRYFO47ET3N4BNTKVXN47U6ICY/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RH57BNT4VQERGEJ5SXNXSVMDYP66YD4H/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTN2OOLKYTG34DODUEJGT5MLC2PFGPBA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3D5TX4TDJPXHXD2QICKTY3OCQC3JARP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHVW73QZJMHA4MK7JBT7CXX7XSNYQEGF/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMDX6IFKLOA3NXUQEV524L5LHTPI2JI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3EJ6J7PXVQOULBQZQGBXCXY6LFF6LZD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXZJL3CNAFS5PAIR7K4RL62S3Y7THR7O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPNWZKXPKTNHS5FVMN7UQZ2UPCSEFJUK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB5YCMIRVX35RUB6XPOWKENCVCJEVDRK/","https://security.gentoo.org/glsa/202305-02","https://security.netapp.com/advisory/ntap-20221209-0007/","https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html","https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-3-12-0-alpha-3-are-now-available/21724"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-45061","description":"An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16."}]},{"artifact":{"id":"6117cfd9a8878038","cpes":["cpe:2.3:a:centos:gnupg2:2.0.22-4.el7:*:*:*:*:*:*:*","cpe:2.3:a:gnupg2:gnupg2:2.0.22-4.el7:*:*:*:*:*:*:*"],"name":"gnupg2","purl":"pkg:rpm/centos/gnupg2@2.0.22-4.el7?arch=x86_64&distro=centos-7&upstream=gnupg2-2.0.22-4.el7.src.rpm","type":"rpm","version":"2.0.22-4.el7","language":"","licenses":["GPLv3+"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2014-4617","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"gnupg2","version":"0:2.0.22-4.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2014-4617","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2014-4617","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-4617","date":"2026-10-08","epss":0.03305,"percentile":0.882}],"risk":1.6525,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2014-4617","description":"The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence."},"relatedVulnerabilities":[{"id":"CVE-2014-4617","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2014-4617","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2014-4617","date":"2026-10-08","epss":0.03305,"percentile":0.882}],"urls":["http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git%3Ba=commit%3Bh=014b2103fcb12f261135e3954f26e9e07b39e342","http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git%3Ba=commit%3Bh=11fdfcf82bd8d2b5bc38292a29876e10770f4b0a","http://lists.gnupg.org/pipermail/gnupg-announce/2014q2/000344.html","http://lists.gnupg.org/pipermail/gnupg-announce/2014q2/000345.html","http://lists.opensuse.org/opensuse-updates/2014-07/msg00010.html","http://secunia.com/advisories/59213","http://secunia.com/advisories/59351","http://secunia.com/advisories/59534","http://secunia.com/advisories/59578","http://www.debian.org/security/2014/dsa-2967","http://www.debian.org/security/2014/dsa-2968","http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","http://www.ubuntu.com/usn/USN-2258-1"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2014-4617","description":"The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence."}]},{"artifact":{"id":"ba41c515194cebe5","cpes":["cpe:2.3:a:python-requests:python-requests:2.6.0-1.el7_1:*:*:*:*:*:*:*","cpe:2.3:a:python-requests:python_requests:2.6.0-1.el7_1:*:*:*:*:*:*:*","cpe:2.3:a:python_requests:python-requests:2.6.0-1.el7_1:*:*:*:*:*:*:*","cpe:2.3:a:python_requests:python_requests:2.6.0-1.el7_1:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-requests:2.6.0-1.el7_1:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_requests:2.6.0-1.el7_1:*:*:*:*:*:*:*","cpe:2.3:a:python:python-requests:2.6.0-1.el7_1:*:*:*:*:*:*:*","cpe:2.3:a:python:python_requests:2.6.0-1.el7_1:*:*:*:*:*:*:*"],"name":"python-requests","purl":"pkg:rpm/centos/python-requests@2.6.0-1.el7_1?arch=noarch&distro=centos-7&upstream=python-requests-2.6.0-1.el7_1.src.rpm","type":"rpm","version":"2.6.0-1.el7_1","language":"","licenses":["ASL 2.0"],"metadata":{"epoch":null,"architecture":"noarch","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-32681","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python-requests","version":"0:2.6.0-1.el7_1"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-32681","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.1,"impactScore":4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-32681","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-32681","date":"2026-10-08","epss":0.02974,"percentile":0.86852}],"risk":1.6505699999999999,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-32681","description":"A flaw was found in the Python-requests package, where it is vulnerable to potentially leaking Proxy-Authorization headers to destination servers, specifically during redirects to an HTTPS origin. This is a product of how rebuild_proxies is used to recompute and reattach the Proxy-Authorization header to requests when redirected. This behavior only affects proxied requests when credentials are supplied in the URL user information component (for example, https://username:password@proxy:8080)."},"relatedVulnerabilities":[{"id":"CVE-2023-32681","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.1,"impactScore":4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.1,"impactScore":4,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-32681","cwe":"CWE-200","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2023-32681","date":"2026-10-08","epss":0.02974,"percentile":0.86852}],"urls":["https://github.com/psf/requests/commit/74ea7cf7a6a27a4eeb2ae24e162bcc942a6706d5","https://github.com/psf/requests/releases/tag/v2.31.0","https://github.com/psf/requests/security/advisories/GHSA-j8r2-6x86-q33q","https://lists.debian.org/debian-lts-announce/2023/06/msg00018.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AW7HNFGYP44RT3DUDQXG2QT3OEV2PJ7Y/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KOYASTZDGQG2BWLSNBPL3TQRL2G7QYNZ/","https://security.gentoo.org/glsa/202309-08"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-32681","description":"Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `rebuild_proxies` to reattach the `Proxy-Authorization` header to requests. For HTTP connections sent through the tunnel, the proxy will identify the header in the request itself and remove it prior to forwarding to the destination server. However when sent over HTTPS, the `Proxy-Authorization` header must be sent in the CONNECT request as the proxy has no visibility into the tunneled request. This results in Requests forwarding proxy credentials to the destination server unintentionally, allowing a malicious actor to potentially exfiltrate sensitive information. This issue has been patched in version 2.31.0."}]},{"artifact":{"id":"36a3070e2292b363","cpes":["cpe:2.3:a:centos:python:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python","purl":"pkg:rpm/centos/python@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-4189","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"0:2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-4189","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-4189","cwe":"CWE-252","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-4189","cwe":"CWE-252","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-4189","date":"2026-10-08","epss":0.03196,"percentile":0.87739}],"risk":1.6459400000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-4189","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible."},"relatedVulnerabilities":[{"id":"CVE-2021-4189","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-4189","cwe":"CWE-252","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-4189","cwe":"CWE-252","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-4189","date":"2026-10-08","epss":0.03196,"percentile":0.87739}],"urls":["https://access.redhat.com/security/cve/CVE-2021-4189","https://bugs.python.org/issue43285","https://bugzilla.redhat.com/show_bug.cgi?id=2036020","https://github.com/python/cpython/commit/0ab152c6b5d95caa2dc1a30fa96e10258b5f188e","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html","https://python-security.readthedocs.io/vuln/ftplib-pasv.html","https://security-tracker.debian.org/tracker/CVE-2021-4189","https://security.netapp.com/advisory/ntap-20221104-0004/","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-4189","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible."}]},{"artifact":{"id":"a10c43ef55e5509e","cpes":["cpe:2.3:a:python-libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python-libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python_libs:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python-libs:2.7.5-58.el7:*:*:*:*:*:*:*","cpe:2.3:a:python:python_libs:2.7.5-58.el7:*:*:*:*:*:*:*"],"name":"python-libs","purl":"pkg:rpm/centos/python-libs@2.7.5-58.el7?arch=x86_64&distro=centos-7&upstream=python-2.7.5-58.el7.src.rpm","type":"rpm","version":"2.7.5-58.el7","language":"","licenses":["Python"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"python","version":"2.7.5-58.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2021-4189","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"python","version":"2.7.5-58.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2021-4189","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-4189","cwe":"CWE-252","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-4189","cwe":"CWE-252","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-4189","date":"2026-10-08","epss":0.03196,"percentile":0.87739}],"risk":1.6459400000000002,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2021-4189","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible."},"relatedVulnerabilities":[{"id":"CVE-2021-4189","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-4189","cwe":"CWE-252","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2021-4189","cwe":"CWE-252","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2021-4189","date":"2026-10-08","epss":0.03196,"percentile":0.87739}],"urls":["https://access.redhat.com/security/cve/CVE-2021-4189","https://bugs.python.org/issue43285","https://bugzilla.redhat.com/show_bug.cgi?id=2036020","https://github.com/python/cpython/commit/0ab152c6b5d95caa2dc1a30fa96e10258b5f188e","https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html","https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html","https://python-security.readthedocs.io/vuln/ftplib-pasv.html","https://security-tracker.debian.org/tracker/CVE-2021-4189","https://security.netapp.com/advisory/ntap-20221104-0004/","https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-4189","description":"A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible."}]},{"artifact":{"id":"8a1e48233a68a928","cpes":["cpe:2.3:a:centos:zlib:1.2.7-17.el7:*:*:*:*:*:*:*","cpe:2.3:a:zlib:zlib:1.2.7-17.el7:*:*:*:*:*:*:*"],"name":"zlib","purl":"pkg:rpm/centos/zlib@1.2.7-17.el7?arch=x86_64&distro=centos-7&upstream=zlib-1.2.7-17.el7.src.rpm","type":"rpm","version":"1.2.7-17.el7","language":"","licenses":["zlib and Boost"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-45853","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"zlib","version":"0:1.2.7-17.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-45853","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-45853","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-45853","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-45853","date":"2026-10-08","epss":0.03179,"percentile":0.87678}],"risk":1.6371850000000001,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-45853","description":"A flaw was found in the MiniZip component of the zlib package. When opening a new file, MiniZip doesn't properly validate the filename, comments, or extra fields length against the data type used to store this information. This may allow an attacker to craft a malicious ZIP file that will lead to an overflow on the length field. This value is further used in memory allocations and indexing, which can cause an out-of-bounds write, leading to heap corruption and possible arbitrary code execution."},"relatedVulnerabilities":[{"id":"CVE-2023-45853","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-45853","cwe":"CWE-190","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-45853","cwe":"CWE-190","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-45853","date":"2026-10-08","epss":0.03179,"percentile":0.87678}],"urls":["http://www.openwall.com/lists/oss-security/2023/10/20/9","http://www.openwall.com/lists/oss-security/2024/01/24/10","https://chromium.googlesource.com/chromium/src/+/d709fb23806858847131027da95ef4c548813356","https://chromium.googlesource.com/chromium/src/+/de29dd6c7151d3cd37cb4cf0036800ddfb1d8b61","https://github.com/madler/zlib/blob/ac8f12c97d1afd9bafa9c710f827d40a407d3266/contrib/README.contrib#L1-L4","https://github.com/madler/zlib/pull/843","https://lists.debian.org/debian-lts-announce/2023/11/msg00026.html","https://pypi.org/project/pyminizip/#history","https://security.gentoo.org/glsa/202401-18","https://security.netapp.com/advisory/ntap-20231130-0009/","https://www.winimage.com/zLibDll/minizip.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-470355.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-45853","description":"MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API."}]},{"artifact":{"id":"b999eb605bd5e265","cpes":["cpe:2.3:a:libxml2:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:rpm/centos/libxml2@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2015-8035","versionConstraint":"< 0:2.9.1-6.el7.4 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"0:2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8035","fix":{"state":"fixed","versions":["0:2.9.1-6.el7.4"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.9.1-6.el7.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2015-8035","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8035","date":"2026-10-08","epss":0.03261,"percentile":0.88028}],"risk":1.6305,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1190","link":"https://access.redhat.com/errata/RHSA-2020:1190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8035","description":"A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash."},"relatedVulnerabilities":[{"id":"CVE-2015-8035","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8035","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8035","date":"2026-10-08","epss":0.03261,"percentile":0.88028}],"urls":["http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html","http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html","http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html","http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html","http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html","http://rhn.redhat.com/errata/RHSA-2016-1089.html","http://www.debian.org/security/2015/dsa-3430","http://www.openwall.com/lists/oss-security/2015/11/02/2","http://www.openwall.com/lists/oss-security/2015/11/02/4","http://www.openwall.com/lists/oss-security/2015/11/03/1","http://www.securityfocus.com/bid/77390","http://www.securitytracker.com/id/1034243","http://www.ubuntu.com/usn/USN-2812-1","http://xmlsoft.org/news.html","https://bugzilla.gnome.org/show_bug.cgi?id=757466","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","https://security.gentoo.org/glsa/201701-37","https://support.apple.com/HT206166","https://support.apple.com/HT206167","https://support.apple.com/HT206168","https://support.apple.com/HT206169"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8035","description":"The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data."}]},{"artifact":{"id":"14f17d8a8607f697","cpes":["cpe:2.3:a:libxml2-python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2-python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2_python:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:libxml2:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2-python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*","cpe:2.3:a:centos:libxml2_python:2.9.1-6.el7_2.3:*:*:*:*:*:*:*"],"name":"libxml2-python","purl":"pkg:rpm/centos/libxml2-python@2.9.1-6.el7_2.3?arch=x86_64&distro=centos-7&upstream=libxml2-2.9.1-6.el7_2.3.src.rpm","type":"rpm","version":"2.9.1-6.el7_2.3","language":"","licenses":["MIT"],"metadata":{"epoch":null,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"libxml2","version":"2.9.1-6.el7_2.3"}],"metadataType":"RpmMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"0:2.9.1-6.el7.4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2015-8035","versionConstraint":"< 0:2.9.1-6.el7.4 (rpm)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"libxml2","version":"2.9.1-6.el7_2.3"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2015-8035","fix":{"state":"fixed","versions":["0:2.9.1-6.el7.4"],"available":[{"date":"2020-07-28","kind":"first-observed","version":"0:2.9.1-6.el7.4"}]},"cvss":[],"cwes":[{"cve":"CVE-2015-8035","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8035","date":"2026-10-08","epss":0.03261,"percentile":0.88028}],"risk":1.6305,"urls":[],"severity":"Medium","namespace":"redhat:distro:redhat:7","advisories":[{"id":"RHSA-2020:1190","link":"https://access.redhat.com/errata/RHSA-2020:1190"}],"dataSource":"https://access.redhat.com/security/cve/CVE-2015-8035","description":"A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to crash."},"relatedVulnerabilities":[{"id":"CVE-2015-8035","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2015-8035","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2015-8035","date":"2026-10-08","epss":0.03261,"percentile":0.88028}],"urls":["http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html","http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html","http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177341.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177381.html","http://lists.opensuse.org/opensuse-updates/2015-12/msg00120.html","http://lists.opensuse.org/opensuse-updates/2016-01/msg00031.html","http://rhn.redhat.com/errata/RHSA-2016-1089.html","http://www.debian.org/security/2015/dsa-3430","http://www.openwall.com/lists/oss-security/2015/11/02/2","http://www.openwall.com/lists/oss-security/2015/11/02/4","http://www.openwall.com/lists/oss-security/2015/11/03/1","http://www.securityfocus.com/bid/77390","http://www.securitytracker.com/id/1034243","http://www.ubuntu.com/usn/USN-2812-1","http://xmlsoft.org/news.html","https://bugzilla.gnome.org/show_bug.cgi?id=757466","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017","https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","https://security.gentoo.org/glsa/201701-37","https://support.apple.com/HT206166","https://support.apple.com/HT206167","https://support.apple.com/HT206168","https://support.apple.com/HT206169"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-8035","description":"The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data."}]},{"artifact":{"id":"2a67e960385a4333","cpes":["cpe:2.3:a:openssl-libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl-libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl_libs:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl-libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*","cpe:2.3:a:centos:openssl_libs:1\\:1.0.2k-8.el7:*:*:*:*:*:*:*"],"name":"openssl-libs","purl":"pkg:rpm/centos/openssl-libs@1.0.2k-8.el7?arch=x86_64&distro=centos-7&epoch=1&upstream=openssl-1.0.2k-8.el7.src.rpm","type":"rpm","version":"1:1.0.2k-8.el7","language":"","licenses":["OpenSSL"],"metadata":{"epoch":1,"architecture":"x86_64","modularityLabel":""},"locations":[{"path":"/var/lib/rpm/Packages","layerID":"sha256:e2d9b9f0500718ec7e5df6fbbb33cd874f745a59bc72ea2891489aaaf545d717","accessPath":"/var/lib/rpm/Packages","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl","version":"1.0.2k-8.el7"}],"metadataType":"RpmMetadata"},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-0464","versionConstraint":"none (unknown)"},"matcher":"rpm-matcher","searchedBy":{"distro":{"type":"centos","version":"7"},"package":{"name":"openssl","version":"1.0.2k-8.el7"},"namespace":"redhat:distro:redhat:7"}}],"vulnerability":{"id":"CVE-2023-0464","fix":{"state":"wont-fix","versions":[]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0464","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-0464","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-0464","date":"2026-10-08","epss":0.03658,"percentile":0.89322}],"risk":1.6278100000000004,"urls":[],"severity":"Low","namespace":"redhat:distro:redhat:7","advisories":[],"dataSource":"https://access.redhat.com/security/cve/CVE-2023-0464","description":"A security vulnerability has been identified in all supported OpenSSL versions related to verifying X.509 certificate chains that include policy constraints. This flaw allows attackers to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial of service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the -policy' argument to the command line utilities or calling the X509_VERIFY_PARAM_set1_policies()' function."},"relatedVulnerabilities":[{"id":"CVE-2023-0464","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-0464","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2023-0464","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2023-0464","date":"2026-10-08","epss":0.03658,"percentile":0.89322}],"urls":["https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1","https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20240621-0006/","https://www.couchbase.com/alerts/","https://www.debian.org/security/2023/dsa-5417","https://www.openssl.org/news/secadv/20230322.txt","https://security.netapp.com/advisory/ntap-20230406-0006/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-0464","description":"A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function."}]}],"grade":"F","score":"0.00","as_of":"2026-10-09T19:03:14.540Z","grype_db_version":"2026-10-09T06:32:32.000Z"}