CVE-2020-24394

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html · Third Party Advisory
• bugs.debian.org/cgi-bin/bugreport.cgi · Issue Tracking
• cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.8 · Release Notes
• git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit · Patch
• security.netapp.com/advisory/ntap-20200904-0003 · Third Party Advisory
• usn.ubuntu.com/4465-1 · Third Party Advisory
• usn.ubuntu.com/4483-1 · Third Party Advisory
• usn.ubuntu.com/4485-1 · Third Party Advisory
• oracle.com/security-alerts/cpuApr2021.html · Patch
• starwindsoftware.com/security/sw-20210325-0004 · Third Party Advisory

sd-wan edge のその他の脆弱性

• CVE-2022-22965緊急 9.8悪用確認済み（CISA KEV）A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific…
• CVE-2022-22963緊急 9.8悪用確認済み（CISA KEV）In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to…
• CVE-2020-36518高 7.5jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
• CVE-2021-42340高 7.5The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduce…
• CVE-2021-33037中 5.3Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header …