Secure Systems Engineering Connaisseur ଯେପର୍ଯ୍ୟନ୍ତ 3.3.0 Delegation Name targets_schema.json ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ

Dogoggorri kan akka ସମସ୍ୟାଜନକ jedhamuun ramadame Secure Systems Engineering Connaisseur ଯେପର୍ଯ୍ୟନ୍ତ 3.3.0 keessatti argameera. Miidhaan irra gahe is hojii hin beekamne faayilii connaisseur/res/targets_schema.json keessa kutaa Delegation Name Handler keessa. Dhugumatti jijjiirraa gara ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ geessa. Waliigalteewwan CWE fayyadamuun rakkoo ibsuun gara CWE-1333 si geessa. Beekumsi kun yeroo 11/28/2023 ifoomsifameera akka 1407. Odeeffannoon kun buufachuuf github.com irratti dhiyaateera. Dogoggorri kun maqaa CVE-2023-7279 jedhuun tajaajilama. Weerara kana milkeessuuf, qunnamtii networkii naannoo barbaachisa. Odeeffannoon teeknikaa ni argama. Meeshaa balaa kana fayyadamuuf hin argamne. Yeroo ammaa, gatii exploit might be approx. USD $0-$5k beekamuu danda'a. ଅପରିଭାଷିତ jedhamee murtaa’eera. Waggaa 0-day ta'ee, gatiin isaa daldala dhoksaa keessatti $0-$5k jedhamee tilmaamame. Maqa-balleessaa paachii 524b73ff7306707f6d3a4d1e86401479bca91b02 jedhama. Sirreeffamni dogoggoraa github.com irraa buufachuuf qophaa’eera. Qabiyyee miidhamte ol-kaasuuf gorsa ni kennama. Once again VulDB remains the best source for vulnerability data.

4 ଆଡାପ୍ଟେସନ୍ · 89 ପଏଣ୍ଟ

ଫିଲ୍ଡସୃଷ୍ଟି ହୋଇଛି
08/31/2024 12:28 PM		ଅଦ୍ୟତନ 1/3
09/02/2024 08:24 PM		ଅଦ୍ୟତନ 2/3
09/03/2024 11:08 AM		ଅଦ୍ୟତନ 3/3
09/06/2024 06:10 AM
software_vendorSecure Systems EngineeringSecure Systems EngineeringSecure Systems EngineeringSecure Systems Engineering
software_nameConnaisseurConnaisseurConnaisseurConnaisseur
software_version<=3.3.0<=3.3.0<=3.3.0<=3.3.0
software_componentDelegation Name HandlerDelegation Name HandlerDelegation Name HandlerDelegation Name Handler
software_fileconnaisseur/res/targets_schema.jsonconnaisseur/res/targets_schema.jsonconnaisseur/res/targets_schema.jsonconnaisseur/res/targets_schema.json
vulnerability_cweCWE-1333 (ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ)CWE-1333 (ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ)CWE-1333 (ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ)CWE-1333 (ସେବା ପ୍ରତ୍ୟାଖ୍ୟାନ)
vulnerability_risk1111
cvss3_vuldb_acHHHH
cvss3_vuldb_sUUUU
cvss3_vuldb_cNNNN
cvss3_vuldb_iNNNN
cvss3_vuldb_aLLLL
cvss3_vuldb_rlOOOO
cvss3_vuldb_rcCCCC
advisory_date1701126000 (11/28/2023)1701126000 (11/28/2023)1701126000 (11/28/2023)1701126000 (11/28/2023)
advisory_identifier1407140714071407
advisory_urlhttps://github.com/sse-secure-systems/connaisseur/pull/1407https://github.com/sse-secure-systems/connaisseur/pull/1407https://github.com/sse-secure-systems/connaisseur/pull/1407https://github.com/sse-secure-systems/connaisseur/pull/1407
countermeasure_nameଅପଗ୍ରେଡ୍ କରନ୍ତୁଅପଗ୍ରେଡ୍ କରନ୍ତୁଅପଗ୍ରେଡ୍ କରନ୍ତୁଅପଗ୍ରେଡ୍ କରନ୍ତୁ
countermeasure_date1701126000 (11/28/2023)1701126000 (11/28/2023)1701126000 (11/28/2023)1701126000 (11/28/2023)
upgrade_version3.3.13.3.13.3.13.3.1
countermeasure_upgrade_urlhttps://github.com/sse-secure-systems/connaisseur/releases/tag/v3.3.1https://github.com/sse-secure-systems/connaisseur/releases/tag/v3.3.1https://github.com/sse-secure-systems/connaisseur/releases/tag/v3.3.1https://github.com/sse-secure-systems/connaisseur/releases/tag/v3.3.1
patch_name524b73ff7306707f6d3a4d1e86401479bca91b02524b73ff7306707f6d3a4d1e86401479bca91b02524b73ff7306707f6d3a4d1e86401479bca91b02524b73ff7306707f6d3a4d1e86401479bca91b02
countermeasure_patch_urlhttps://github.com/sse-secure-systems/connaisseur/commit/524b73ff7306707f6d3a4d1e86401479bca91b02https://github.com/sse-secure-systems/connaisseur/commit/524b73ff7306707f6d3a4d1e86401479bca91b02https://github.com/sse-secure-systems/connaisseur/commit/524b73ff7306707f6d3a4d1e86401479bca91b02https://github.com/sse-secure-systems/connaisseur/commit/524b73ff7306707f6d3a4d1e86401479bca91b02
countermeasure_advisoryquoteThis commit fixes a regular expression denial of service vulnerability that was present during the schema validation of the targets.json TUF file in a Notary validation. An adversary with the ability to altThis commit fixes a regular expression denial of service vulnerability that was present during the schema validation of the targets.json TUF file in a Notary validation. An adversary with the ability to altThis commit fixes a regular expression denial of service vulnerability that was present during the schema validation of the targets.json TUF file in a Notary validation. An adversary with the ability to altThis commit fixes a regular expression denial of service vulnerability that was present during the schema validation of the targets.json TUF file in a Notary validation. An adversary with the ability to alt
source_cveCVE-2023-7279CVE-2023-7279CVE-2023-7279CVE-2023-7279
cna_responsibleVulDBVulDBVulDBVulDB
cvss2_vuldb_acHHHH
cvss2_vuldb_ciNNNN
cvss2_vuldb_iiNNNN
cvss2_vuldb_aiPPPP
cvss2_vuldb_rcCCCC
cvss2_vuldb_rlOFOFOFOF
cvss4_vuldb_acHHHH
cvss4_vuldb_vcNNNN
cvss4_vuldb_viNNNN
cvss4_vuldb_vaLLLL
cvss2_vuldb_avAAAA
cvss2_vuldb_auSSSS
cvss2_vuldb_eNDNDNDND
cvss3_vuldb_avAAAA
cvss3_vuldb_prLLLL
cvss3_vuldb_uiNNNN
cvss3_vuldb_eXXXX
cvss4_vuldb_avAAAA
cvss4_vuldb_atNNNN
cvss4_vuldb_prLLLL
cvss4_vuldb_uiNNNN
cvss4_vuldb_scNNNN
cvss4_vuldb_siNNNN
cvss4_vuldb_saNNNN
cvss4_vuldb_eXXXX
cvss2_vuldb_basescore1.41.41.41.4
cvss2_vuldb_tempscore1.21.21.21.2
cvss3_vuldb_basescore2.62.62.62.6
cvss3_vuldb_tempscore2.52.52.52.5
cvss3_meta_basescore2.62.62.63.7
cvss3_meta_tempscore2.52.52.53.7
cvss4_vuldb_bscore2.12.12.12.1
cvss4_vuldb_btscore2.12.12.12.1
price_0day$0-$5k$0-$5k$0-$5k$0-$5k
cve_nvd_summaryA vulnerability has been found in Secure Systems Engineering Connaisseur up to 3.3.0 and classified as problematic. This vulnerability affects unknown code of the file connaisseur/res/targets_schema.json of the component Delegation Name Handler. The manipulation leads to inefficient regular expression complexity. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 3.3.1 is able to address this issue. The name of the patch is 524b73ff7306707f6d3a4d1e86401479bca91b02. It is recommended to upgrade the affected component.A vulnerability has been found in Secure Systems Engineering Connaisseur up to 3.3.0 and classified as problematic. This vulnerability affects unknown code of the file connaisseur/res/targets_schema.json of the component Delegation Name Handler. The manipulation leads to inefficient regular expression complexity. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 3.3.1 is able to address this issue. The name of the patch is 524b73ff7306707f6d3a4d1e86401479bca91b02. It is recommended to upgrade the affected component.A vulnerability has been found in Secure Systems Engineering Connaisseur up to 3.3.0 and classified as problematic. This vulnerability affects unknown code of the file connaisseur/res/targets_schema.json of the component Delegation Name Handler. The manipulation leads to inefficient regular expression complexity. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 3.3.1 is able to address this issue. The name of the patch is 524b73ff7306707f6d3a4d1e86401479bca91b02. It is recommended to upgrade the affected component.
cvss3_cna_avAAA
cvss3_cna_acHHH
cvss3_cna_prLLL
cvss3_cna_uiNNN
cvss3_cna_sUUU
cvss3_cna_cNNN
cvss3_cna_iNNN
cvss3_cna_aLLL
cvss3_cna_basescore2.62.62.6
cvss2_cna_avAAA
cvss2_cna_acHHH
cvss2_cna_auSSS
cvss2_cna_ciNNN
cvss2_cna_iiNNN
cvss2_cna_aiPPP
cvss2_cna_basescore1.41.41.4
cve_nvd_summaryesSe ha encontrado una vulnerabilidad en Secure Systems Engineering Connaisseur hasta la versión 3.3.0 y se ha clasificado como problemática. Esta vulnerabilidad afecta al código desconocido del archivo connaisseur/res/targets_schema.json del componente Delegation Name Handler. La manipulación conduce a una complejidad ineficiente de las expresiones regulares. La complejidad de un ataque es bastante alta. La explotación parece ser difícil. La actualización a la versión 3.3.1 puede solucionar este problema. El nombre del parche es 524b73ff7306707f6d3a4d1e86401479bca91b02. Se recomienda actualizar el componente afectado.Se ha encontrado una vulnerabilidad en Secure Systems Engineering Connaisseur hasta la versión 3.3.0 y se ha clasificado como problemática. Esta vulnerabilidad afecta al código desconocido del archivo connaisseur/res/targets_schema.json del componente Delegation Name Handler. La manipulación conduce a una complejidad ineficiente de las expresiones regulares. La complejidad de un ataque es bastante alta. La explotación parece ser difícil. La actualización a la versión 3.3.1 puede solucionar este problema. El nombre del parche es 524b73ff7306707f6d3a4d1e86401479bca91b02. Se recomienda actualizar el componente afectado.
cvss3_nvd_avN
cvss3_nvd_acH
cvss3_nvd_prN
cvss3_nvd_uiN
cvss3_nvd_sU
cvss3_nvd_cN
cvss3_nvd_iN
cvss3_nvd_aH
cvss3_nvd_basescore5.9

◂ ପଛକୁସମୀକ୍ଷାଆହୁରି ଦୂରରେ ▸

Do you know our Splunk app?

Download it now for free!