Vulnerabilities Archives - RedPacket Security

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

Vulnerabilities

CVE-2021-36160

October 11, 2021 admin CVE, CVE-2021-36160, MISC, Release Notes, vulnerability

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

Vulnerabilities

CVE-2021-36160

October 11, 2021 admin CVE, CVE-2021-36160, MISC, Release Notes, vulnerability

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

Vulnerabilities

CVE-2021-36160

October 11, 2021 admin CVE, CVE-2021-36160, MISC, Release Notes, vulnerability

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

Vulnerabilities

CVE-2021-41732

October 11, 2021 admin CVE, CVE-2021-41732, exploit, MISC, vulnerability

** DISPUTED ** An issue was discovered in zeek version 4.1.0. There is a HTTP request splitting vulnerability that will invalidate any ZEEK HTTP based security analysis. NOTE: the vendor’s position is that the observed behavior is intended.

Vulnerabilities

CVE-2021-39893

October 10, 2021 admin Broken Link, CVE, CVE-2021-39893, MISC, vulnerability

A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed parsing files without authorisation.

Vulnerabilities

CVE-2021-36160

October 10, 2021 admin CVE, CVE-2021-36160, MISC, Release Notes, vulnerability

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

Vulnerabilities

CVE-2021-36160

October 10, 2021 admin CVE, CVE-2021-36160, MISC, Release Notes, vulnerability

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

Vulnerabilities

CVE-2021-35197

October 10, 2021 admin CONFIRM, CVE, CVE-2021-35197, patch, vulnerability

In MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots have certain unintended API access. When a bot account has a “sitewide block” applied, it is able to still “purge” pages through the MediaWiki Action API (which a “sitewide block” should have prevented).

Vulnerabilities

CVE-2021-35197

October 10, 2021 admin CONFIRM, CVE, CVE-2021-35197, patch, vulnerability

Vulnerabilities

CVE-2020-19131

October 10, 2021 admin CVE, CVE-2020-19131, exploit, MISC, vulnerability

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the “invertImage()” function in the component “tiffcrop”.

Vulnerabilities

CVE-2021-3749

October 10, 2021 admin CVE, CVE-2021-3749, MISC, patch, vulnerability

axios is vulnerable to Inefficient Regular Expression Complexity

Vulnerabilities

CVE-2021-35491

October 9, 2021 admin CVE, CVE-2021-35491, exploit, MISC, vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5 allows a remote attacker to delete a user account via the /enginemanager/server/user/delete.htm userName parameter. The application does not implement a CSRF token for the GET request.

Vulnerabilities

CVE-2021-41554

October 9, 2021 admin CVE, CVE-2021-41554, MISC, Third Party Advisory, vulnerability

** UNSUPPORTED WHEN ASSIGNED ** ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests for access to data and functionality in these affected endpoints: /archibus/schema/ab-edit-users.axvw, /archibus/schema/ab-data-dictionary-table.axvw, /archibus/schema/ab-schema-add-field.axvw, /archibus/schema/ab-core/views/process-navigator/ab-my-user-profile.axvw. By not verifying the permissions for access to resources, it allows a potential attacker to view pages that are not allowed. Specifically, it was found that any authenticated user can reach the administrative console for user management by directly requesting access to the page via URL. This allows a malicious user to modify all users’ profiles, to elevate any privileges to administrative ones, or to create or delete any type of user. It is also possible to modify the emails of other users, through a misconfiguration of the username parameter, on the user profile page. This is fixed in all recent versions, such as version 26. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Version 21.3 was officially de-supported by the end of 2020.

Vulnerabilities

CVE-2021-39893

October 9, 2021 admin Broken Link, CVE, CVE-2021-39893, MISC, vulnerability

A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed parsing files without authorisation.

Vulnerabilities

CVE-2021-3749

October 9, 2021 admin CVE, CVE-2021-3749, MISC, patch, vulnerability

axios is vulnerable to Inefficient Regular Expression Complexity

Vulnerabilities

CVE-2021-36160

October 9, 2021 admin CVE, CVE-2021-36160, MISC, Release Notes, vulnerability

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

Vulnerabilities

CVE-2021-39226

October 8, 2021 admin CVE, CVE-2021-39226, MISC, patch, vulnerability

Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /api/snapshots/:key. If the snapshot “public_mode” configuration setting is set to true (vs default of false), unauthenticated users are able to delete the snapshot with the lowest database key by accessing the literal path: /api/snapshots-delete/:deleteKey. Regardless of the snapshot “public_mode” setting, authenticated users are able to delete the snapshot with the lowest database key by accessing the literal paths: /api/snapshots/:key, or /api/snapshots-delete/:deleteKey. The combination of deletion and viewing enables a complete walk through all snapshot data while resulting in complete snapshot data loss. This issue has been resolved in versions 8.1.6 and 7.5.11. If for some reason you cannot upgrade you can use a reverse proxy or similar to block access to the literal paths: /api/snapshots/:key, /api/snapshots-delete/:deleteKey, /dashboard/snapshot/:key, and /api/snapshots/:key. They have no normal function and can be disabled without side effects.

Vulnerabilities

CVE-2021-33600

October 8, 2021 admin CVE, CVE-2021-33600, MISC, Vendor Advisory, vulnerability

A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs because of an attacker can trigger assertion via malformed HTTP packet to web interface. An unauthenticated attacker could exploit this vulnerability by sending a large username parameter. A successful exploitation could lead to a denial-of-service of the product.