splunk universal forwarder vulnerabilities and exploits

(subscribe to this query)

libpcre in PCRE prior to 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.

Pcre Pcre Apple Macos Splunk Universal Forwarder Splunk Universal Forwarder 9.1.0

A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl...

Haxx Curl Apple Macos Splunk Universal Forwarder Splunk Universal Forwarder 9.1.0

An out-of-bounds read exists in PCRE prior to 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an malicious user to crash t...

Pcre Pcre2 Fedoraproject Fedora 31 Splunk Universal Forwarder Splunk Universal Forwarder 9.1.0

In Splunk Enterprise and Universal Forwarder versions prior to 9.0, the Splunk command-line interface (CLI) did not validate TLS certificates while connecting to a remote Splunk platform instance by default. After updating to version 9.0, see Configure TLS host name validation fo...

Splunk Splunk Splunk Universal Forwarder

In Splunk Enterprise and Universal Forwarder versions in the following table, indexing a specially crafted ZIP file using the file monitoring input can result in a crash of the application. Attempts to restart the application would result in a crash and would require manually rem...

Splunk Splunk Splunk Universal Forwarder

SQLite 1.0.12 up to and including 3.39.x prior to 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

Sqlite Sqlite Netapp Ontap Select Deploy Administration Utility -Splunk Universal Forwarder Splunk Universal Forwarder 9.1.0

1 Github repository1 Article

In libarchive prior to 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties di...

Libarchive Libarchive Debian Debian Linux 10.0 Fedoraproject Fedora 37 Splunk Universal Forwarder Splunk Universal Forwarder 9.1.0

libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, s...

Haxx Curl Debian Debian Linux 10.0 Debian Debian Linux 11.0 Splunk Universal Forwarder Splunk Universal Forwarder 9.1.0

Use after free in Blink XSLT in Google Chrome before 91.0.4472.164 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.

Google Chrome Xmlsoft Libxslt Debian Debian Linux 10.0 Debian Debian Linux 11.0 Splunk Universal Forwarder Splunk Universal Forwarder 9.1.0

In curl prior to 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mechanism could be byp...

Haxx Curl Fedoraproject Fedora 35 Fedoraproject Fedora 36 Fedoraproject Fedora 37 Apple Macos Splunk Universal Forwarder Splunk Universal Forwarder 9.1.0

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook