CVE-2019-20388

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html · Mailing List
• gitlab.gnome.org/GNOME/libxml2/merge_requests/68 · Patch
• lists.debian.org/debian-lts-announce/2020/09/msg00009.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH
• security.gentoo.org/glsa/202010-04 · Third Party Advisory
• security.netapp.com/advisory/ntap-20200702-0005 · Third Party Advisory
• oracle.com/security-alerts/cpuapr2022.html · Patch
• oracle.com/security-alerts/cpujul2020.html · Patch
• oracle.com/security-alerts/cpujul2022.html
• oracle.com/security-alerts/cpuoct2021.html · Patch
• cert-portal.siemens.com/productcert/html/ssa-398330.html

communications cloud native core network function cloud native environment のその他の脆弱性

• CVE-2022-22965緊急 9.8悪用確認済み（CISA KEV）A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific…
• CVE-2022-22963緊急 9.8悪用確認済み（CISA KEV）In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to…
• CVE-2022-22947緊急 10.0悪用確認済み（CISA KEV）In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuat…
• CVE-2022-23308高 7.5valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
• CVE-2022-24407高 8.8In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.