CVE-2019-20388

Mô tả

Tham khảo

• lists.opensuse.org/opensuse-security-announce/2020-05/msg00047.html · Mailing List
• gitlab.gnome.org/GNOME/libxml2/merge_requests/68 · Patch
• lists.debian.org/debian-lts-announce/2020/09/msg00009.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/545SPOI3ZPPNPX4TFRIVE4JVRTJRKULL
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5R55ZR52RMBX24TQTWHCIWKJVRV6YAWI
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDPF3AAVKUAKDYFMFKSIQSVVS3EEFPQH
• security.gentoo.org/glsa/202010-04 · Third Party Advisory
• security.netapp.com/advisory/ntap-20200702-0005 · Third Party Advisory
• oracle.com/security-alerts/cpuapr2022.html · Patch

Lỗ hổng khác của communications cloud native core network function cloud native environment

• CVE-2022-22965NGHIÊM TRỌNG 9.8ĐANG BỊ KHAI THÁC (CISA KEV)A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific…
• CVE-2022-22963NGHIÊM TRỌNG 9.8ĐANG BỊ KHAI THÁC (CISA KEV)In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to…
• CVE-2022-22947NGHIÊM TRỌNG 10.0ĐANG BỊ KHAI THÁC (CISA KEV)In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuat…
• CVE-2022-23308CAO 7.5valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
• CVE-2022-24407CAO 8.8In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.