Lucene search
PhotonPHSA-2019-0132HistoryFeb 21, 2019 - 12:00 a.m.
Critical Photon OS Security Update - PHSA-2019-0132
2019-02-2100:00:00
github.com
13
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.964 High
EPSS
Percentile
99.6%
Updates of [‘elasticsearch’, ‘python3’, ‘kibana’, ‘nginx’, ‘sqlite’] packages of Photon OS have been released.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Photon | 2.0 | x86_64 | python3-debuginfo | < 3.6.5-4.ph2 | python3-debuginfo-3.6.5-4.ph2.x86_64.rpm |
| Photon | 2.0 | x86_64 | python3-xml | < 3.6.5-4.ph2 | python3-xml-3.6.5-4.ph2.x86_64.rpm |
| Photon | 2.0 | x86_64 | elasticsearch | < 6.4.3-1.ph2 | elasticsearch-6.4.3-1.ph2.x86_64.rpm |
| Photon | 2.0 | x86_64 | python3-test | < 3.6.5-4.ph2 | python3-test-3.6.5-4.ph2.x86_64.rpm |
| Photon | 2.0 | x86_64 | sqlite-devel | < 3.26.0-1.ph2 | sqlite-devel-3.26.0-1.ph2.x86_64.rpm |
| Photon | 2.0 | noarch | python3-pip | < 3.6.5-4.ph2 | python3-pip-3.6.5-4.ph2.noarch.rpm |
| Photon | 2.0 | noarch | python3-setuptools | < 3.6.5-4.ph2 | python3-setuptools-3.6.5-4.ph2.noarch.rpm |
| Photon | 2.0 | x86_64 | python3-devel | < 3.6.5-4.ph2 | python3-devel-3.6.5-4.ph2.x86_64.rpm |
| Photon | 2.0 | x86_64 | sqlite-debuginfo | < 3.26.0-1.ph2 | sqlite-debuginfo-3.26.0-1.ph2.x86_64.rpm |
| Photon | 2.0 | x86_64 | sqlite | < 3.26.0-1.ph2 | sqlite-3.26.0-1.ph2.x86_64.rpm |
Related
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2019-2.0-0132
2019-02-21 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2019-1.0-0209
2019-02-20 00:00:00
Critical Photon OS Security Update - PHSA-2019-0209
2019-02-20 00:00:00
nessus
nessus
Photon OS 1.0: Kibana PHSA-2019-1.0-0209
2020-01-28 00:00:00
Photon OS 2.0: Kibana PHSA-2019-2.0-0132
2019-03-18 00:00:00
Kibana ESA-2018-18
2018-11-07 00:00:00
cvelist
cvelist
osv
osv
CVE-2018-17244
2018-12-20 22:29:00
CVE-2018-17246
2018-12-20 22:29:00
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
2022-05-13 01:34:04
openvas
openvas
veracode
veracode
Information Disclosure
2018-11-08 02:25:29
Arbitrary File Inclusion
2018-11-08 02:14:40
Denial Of Service (DoS)
2019-11-07 00:19:06
cve
cve
redhatcve
redhatcve
nvd
nvd
prion
prion
Design/Logic Flaw
2018-12-20 22:29:00
Cross site request forgery (csrf)
2018-12-20 22:29:00
Authorization
2018-12-20 22:29:00
ubuntucve
ubuntucve
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
2022-05-13 01:34:04
nuclei
nuclei
Kibana - Local File Inclusion
2021-04-08 21:01:08
cbl_mariner
cbl_mariner
CVE-2018-20346 affecting package ceph for versions less than 18.2.1-1
2024-04-17 22:02:46
ibm
ibm
debiancve
debiancve
alpinelinux
alpinelinux
gentoo
gentoo
SQLite: Remote code execution
2019-04-22 00:00:00
suse
suse
Security update for sqlite3 (moderate)
2019-04-05 00:00:00
Security update for sqlite3 (moderate)
2019-04-17 00:00:00
Security update for python3 (important)
2019-02-09 00:00:00
checkpoint_advisories
checkpoint_advisories
SQLite FTS Integer Overflow (CVE-2018-20346)
2019-01-15 00:00:00
debian
debian
[SECURITY] [DLA 1613-1] sqlite3 security update
2018-12-22 00:38:40
[SECURITY] [DLA 1572-1] nginx security update
2018-11-08 17:54:18
[SECURITY] [DSA 4335-1] nginx security update
2018-11-08 21:34:23
mageia
mageia
Updated sqlite3 packages fix security vulnerability
2018-12-27 02:08:41
Updated nginx package fixes security vulnerabilities
2018-11-18 01:23:26
f5
f5
K24374526 : nginx vulnerability CVE-2018-16845
2019-01-11 00:00:00
nginx
nginx
Memory disclosure in the ngx_http_mp4_module
2018-11-07 14:29:00
redhat
redhat
(RHSA-2018:3652) Important: rh-nginx18-nginx security update
2018-11-26 11:39:20
(RHSA-2018:3653) Important: rh-nginx110-nginx security update
2018-11-26 11:39:41
(RHSA-2018:3681) Important: rh-nginx114-nginx security update
2018-11-27 08:38:25
amazon
amazon
Important: python34
2019-05-02 17:31:00
Important: python3
2019-05-02 18:48:00
fedora
fedora
[SECURITY] Fedora 28 Update: python34-3.4.10-1.fc28
2019-03-29 02:05:28
[SECURITY] Fedora 30 Update: python34-3.4.10-1.fc30
2019-03-29 19:39:48
[SECURITY] Fedora 29 Update: mingw-sqlite-3.26.0.0-1.fc29
2019-08-13 01:59:18
threatpost
threatpost
DEF CON 2019: Researchers Demo Hacking Google Home for RCE
2019-08-09 15:47:32
hivepro
hivepro
VMware Unveils Critical Authentication Bypass Vulnerability in VCD Appliance
2023-11-17 08:07:39
vmware
vmware
zdt
zdt
VMware Cloud Director 10.5 - Bypass identity verification Exploit
2024-03-12 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package nginx version 1.14.1-alt1
2018-11-06 00:00:00
oraclelinux
oraclelinux
olcne nginx security update
2020-09-28 00:00:00
olcne nginx security update
2020-09-24 00:00:00
freebsd
freebsd
NGINX -- Multiple vulnerabilities
2018-11-06 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.964 High
EPSS
Percentile
99.6%
Related for PHSA-2019-0132