Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications cloud native core binding support function 22.1.3 vulnerabilities and exploits

(subscribe to this query)
7.4
CVSSv3
CVE-2021-20322
A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomizat...
Linux Linux KernelFedoraproject Fedora 34Debian Debian Linux 9.0Debian Debian Linux 10.0Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp E-series Santricity Os ControllerNetapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Fas Baseboard Management Controller Firmware -Netapp Aff Baseboard Management Controller Firmware -Netapp Aff A700s Firmware -Netapp H700s Firmware -Netapp H700e Firmware -Netapp H500s Firmware -Netapp H410s Firmware -Netapp H500e Firmware -Netapp H300e Firmware -Netapp H300s Firmware -Netapp Hci Compute Node Firmware -Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Policy 22.2.0Oracle Communications Cloud Native Core Network Exposure Function 22.1.1
7.5
CVSSv3
CVE-2021-45485
In the IPv6 implementation in the Linux kernel prior to 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresse...
Linux Linux KernelNetapp E-series Santricity Os Controller -Netapp Solidfire \\& Hci Management Node -Netapp Brocade Fabric Operating System Firmware -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Policy 22.2.0Oracle Communications Cloud Native Core Network Exposure Function 22.1.1Netapp All Flash Fabric-attached Storage 8300 Firmware -Netapp Fabric-attached Storage 8300 Firmware -Netapp All Flash Fabric-attached Storage 8700 Firmware -Netapp Fabric-attached Storage 8700 Firmware -Netapp Aff A400 Firmware -Netapp Fabric-attached Storage A400 Firmware -Netapp Hci Compute Node Firmware -Netapp H300e Firmware -Netapp H300s Firmware -Netapp H410c Firmware -Netapp H410s Firmware -Netapp H500e Firmware -Netapp H500s Firmware -Netapp H610c Firmware -
7.5
CVSSv3
CVE-2021-3737
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to syst...
Python PythonRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems 8.0Redhat Codeready Linux Builder For Ibm Z Systems 8.0Redhat Codeready Linux Builder For Power Little Endian 8.0Redhat Codeready Linux Builder 8.0Fedoraproject Fedora 33Fedoraproject Fedora 34Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 21.04Netapp Ontap Select Deploy Administration Utility -Netapp Hci -Netapp Management Services For Element Software -Netapp Netapp Xcp Smb -Netapp Xcp Nfs -Oracle Communications Cloud Native Core Binding Support Function 22.1.3
7.5
CVSSv3
CVE-2020-36518
jackson-databind prior to 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
Fasterxml Jackson-databindOracle Weblogic Server 12.2.1.3.0Oracle Commerce Platform 11.3.1Oracle Utilities Framework 4.3.0.5.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Weblogic Server 12.2.1.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Primavera Unifier 19.12Oracle Sd-wan Edge 9.0Oracle Weblogic Server 14.1.1.0.0Oracle Coherence 14.1.1.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Global Lifecycle Management Nextgen Oui Framework 13.9.4.2.2Oracle Primavera Unifier 20.12Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera GatewayOracle Utilities Framework 4.4.0.3.0Oracle Sd-wan Edge 9.1Oracle Commerce Platform 11.3.0Oracle Commerce Platform 11.3.2Oracle Primavera Unifier 21.12
9.8
CVSSv3
CVE-2022-22965
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....
Vmware Spring FrameworkCisco Cx Cloud AgentOracle Sd-wan Edge 9.0Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Sd-wan Edge 9.1Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Oracle Product Lifecycle Analytics 3.6.1Oracle Financial Services Enterprise Case Management 8.1.1.0Oracle Financial Services Enterprise Case Management 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 22.1.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0
5.5
CVSSv3
CVE-2021-3744
A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows malicious users to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.
Linux Linux Kernel 5.15Linux Linux KernelFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Redhat Developer Tools 1.0Redhat Enterprise Linux For Real Time 8Redhat Enterprise Linux For Real Time For Nfv 8Redhat Codeready Linux Builder For Power Little Endian 8.0Redhat Codeready Linux Builder 8.0Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.6Redhat Enterprise Linux Server Update Services For Sap Solutions 8.6Redhat Enterprise Linux For Ibm Z Systems Eus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Codeready Linux Builder For Power Little Endian Eus 8.6Redhat Codeready Linux Builder Eus 8.6Redhat Enterprise Linux For Real Time 8.6Redhat Enterprise Linux Server Eus 8.6Redhat Enterprise Linux For Power Little Endian Eus 8.6
6.5
CVSSv3
CVE-2021-3772
A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.
Linux Linux KernelRedhat Enterprise Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Policy 22.2.0Oracle Communications Cloud Native Core Network Exposure Function 22.1.1Netapp Solidfire \\& Hci Management Node -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp E-series Santricity Os Controller 11.0Netapp E-series Santricity Os Controller 11.0.0Netapp E-series Santricity Os Controller 11.20Netapp E-series Santricity Os Controller 11.25Netapp E-series Santricity Os Controller 11.30Netapp E-series Santricity Os Controller 11.30.5r3Netapp E-series Santricity Os Controller 11.40Netapp E-series Santricity Os Controller 11.40.3r2Netapp E-series Santricity Os Controller 11.40.5Netapp E-series Santricity Os Controller 11.50.1Netapp E-series Santricity Os Controller 11.50.2Netapp E-series Santricity Os Controller 11.60
7.8
CVSSv3
CVE-2022-1011
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.
Linux Linux KernelLinux Linux Kernel 5.17Fedoraproject Fedora 34Fedoraproject Fedora 35Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Redhat Developer Tools 1.0Redhat Enterprise Linux For Real Time 8Redhat Enterprise Linux For Real Time For Nfv 8Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems 8.0Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.6Redhat Build Of Quarkus 2.0Redhat Enterprise Linux For Real Time For Nfv Tus 8.6Redhat Enterprise Linux For Real Time Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux For Ibm Z Systems Eus 8.6Redhat Enterprise Linux For Power Little Endian Eus 8.6Redhat Enterprise Linux Server Update Services For Sap Solutions 8.6Redhat Enterprise Linux Server Tus 8.6
6.5
CVSSv3
CVE-2022-0001
Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
Intel Celeron J4005 -Intel Celeron N4100 -Intel Celeron N4000 -Intel Celeron J4105 -Intel Pentium Silver J5005 -Intel Pentium Silver N5000 -Intel Core I3-10110u -Intel Core I3-1005g1 -Intel Core I5-10210u -Intel Core I5-10310y -Intel Core I5-10210y -Intel Core I5-1035g4 -Intel Core I5-1035g7 -Intel Core I5-1035g1 -Intel Core I5-9300h -Intel Core I5-9400h -Intel Core I5-9400 -Intel Core I5-9600k -Intel Core I5-8265u -Intel Core I5-8200y -Intel Core I7-10510u -Intel Core I7-10510y -
6.5
CVSSv3
CVE-2022-0002
Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
Intel Celeron J4005 -Intel Celeron N4100 -Intel Celeron N4000 -Intel Celeron J4105 -Intel Celeron J3355 -Intel Celeron N3350 -Intel Celeron J3455 -Intel Celeron N3450 -Intel Atom X5-e3930 -Intel Atom X5-e3940 -Intel Atom X7-e3950 -Intel Pentium Silver J5005 -Intel Pentium Silver N5000 -Intel Core I3-10110u -Intel Core I3-1005g1 -Intel Core I5-10210u -Intel Core I5-10310y -Intel Core I5-10210y -Intel Core I5-1035g4 -Intel Core I5-1035g7 -Intel Core I5-1035g1 -Intel Core I5-9300h -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040privilege escalationCVE-2024-4112CVE-2024-32872man-in-the-middleCVE-2024-32788bypassCVE-2024-3400CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook