Lucene search
PhotonPHSA-2023-3.0-0518HistoryJan 19, 2023 - 12:00 a.m.
Important Photon OS Security Update - PHSA-2023-3.0-0518
2023-01-1900:00:00
github.com
40
photon os
security update
phsa-2023
apache-tomcat
krb5
sudo
e2fsprogs
unix
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.007
Percentile
80.5%
Updates of [‘apache-tomcat’, ‘krb5’, ‘e2fsprogs’, ‘sudo’] packages of Photon OS have been released.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Photon | 3.0 | x86_64 | e2fsprogs-devel | < 1.46.5-2.ph3 | e2fsprogs-devel-1.46.5-2.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | krb5 | < 1.17-4.ph3 | krb5-1.17-4.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | krb5-lang | < 1.17-4.ph3 | krb5-lang-1.17-4.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | e2fsprogs-libs | < 1.46.5-2.ph3 | e2fsprogs-libs-1.46.5-2.ph3.x86_64.rpm |
| Photon | 3.0 | noarch | apache-tomcat | < 8.5.84-1.ph3 | apache-tomcat-8.5.84-1.ph3.noarch.rpm |
| Photon | 3.0 | x86_64 | krb5-devel | < 1.17-4.ph3 | krb5-devel-1.17-4.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | e2fsprogs | < 1.46.5-2.ph3 | e2fsprogs-1.46.5-2.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | sudo | < 1.9.5-5.ph3 | sudo-1.9.5-5.ph3.x86_64.rpm |
| Photon | 3.0 | x86_64 | e2fsprogs-lang | < 1.46.5-2.ph3 | e2fsprogs-lang-1.46.5-2.ph3.x86_64.rpm |
Related
photon
photon
Important Photon OS Security Update - PHSA-2023-0518
2023-01-19 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0314
2023-01-17 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0315
2023-01-18 00:00:00
nessus
nessus
Photon OS 3.0: Apache PHSA-2023-3.0-0518
2024-07-24 00:00:00
Photon OS 4.0: Apache PHSA-2023-4.0-0314
2024-07-23 00:00:00
RHEL 7 / 9 : Red Hat JBoss Web Server 5.7.2 release and (RHSA-2023:1663)
2023-04-12 00:00:00
redhat
redhat
(RHSA-2023:0280) Important: sudo security update
2023-01-23 08:22:47
ibm
ibm
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from krb5 and e2fsprogs
2022-12-26 07:37:16
osv
osv
tomcat9 - security update
2023-04-05 00:00:00
CVE-2022-42252
2022-11-01 09:15:10
Apache Tomcat may reject request containing invalid Content-Length header
2022-11-01 12:00:30
openvas
openvas
Debian: Security Advisory (DSA-5381-1)
2023-04-06 00:00:00
Apache Tomcat Request Smuggling Vulnerability (Oct 2022) - Linux
2022-11-02 00:00:00
debian
debian
[SECURITY] [DSA 5381-1] tomcat9 security update
2023-04-05 20:07:07
[SECURITY] [DLA 3272-1] sudo security update
2023-01-18 15:43:20
[SECURITY] [DSA 5321-1] sudo security update
2023-01-18 15:39:21
gentoo
gentoo
Apache Tomcat: Multiple Vulnerabilities
2023-05-30 00:00:00
sudo: Root Privilege Escalation
2023-05-03 00:00:00
kaspersky
kaspersky
KLA20148 ACE vulnerability in Apache Tomcat
2022-11-21 00:00:00
KLA20032 SB vulnerability in Apache Tomcat
2022-10-07 00:00:00
KLA20034 SB vulnerability in Apache Tomcat
2022-10-10 00:00:00
prion
prion
Design/Logic Flaw
2023-01-03 19:15:00
Design/Logic Flaw
2023-01-18 17:15:00
Cross site request forgery (csrf)
2022-11-01 09:15:00
atlassian
atlassian
veracode
veracode
Arbitrary Code Injection
2023-01-09 18:49:15
HTTP Request Smuggling
2022-11-02 05:50:14
cvelist
cvelist
CVE-2022-45143 Apache Tomcat: JsonErrorReportValve escaping
2023-01-03 18:12:28
CVE-2023-22809
2023-01-18 00:00:00
CVE-2022-42252 Apache Tomcat request smuggling via malformed content-length
2022-11-01 00:00:00
github
github
Apache Tomcat improperly escapes input from JsonErrorReportValve
2023-01-03 21:30:21
Apache Tomcat may reject request containing invalid Content-Length header
2022-11-01 12:00:30
cnvd
cnvd
Apache Tomcat Environment Issue Vulnerability (CNVD-2022-74082)
2022-11-02 00:00:00
ubuntu
ubuntu
Tomcat vulnerability
2024-07-09 00:00:00
Sudo vulnerability
2023-01-30 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 9.0.68
2022-10-07 00:00:00
Fixed in Apache Tomcat 8.5.83
2022-10-11 00:00:00
Fixed in Apache Tomcat 10.0.27
2022-10-10 00:00:00
cve
cve
ubuntucve
ubuntucve
CVE-2022-42252
2022-11-01 00:00:00
CVE-2022-45143
2023-01-03 00:00:00
freebsd
freebsd
Tomcat -- Request Smuggling
2022-10-31 00:00:00
redos
redos
ROS-20240715-01
2024-07-15 00:00:00
ROS-20230124-01
2023-01-24 00:00:00
ROS-20240729-04
2024-07-29 00:00:00
f5
f5
K000133224 : Apache Tomcat vulnerability CVE-2022-42252
2023-03-28 00:00:00
K000133390 : Apache Tomcat vulnerability CVE-2022-45143
2023-04-18 00:00:00
K000132667 : Sudo vulnerability CVE-2023-22809
2023-02-20 00:00:00
redhatcve
redhatcve
nvd
nvd
cbl_mariner
cbl_mariner
CVE-2023-22809 affecting package sudo 1.9.12p1-1
2023-03-02 04:18:33
CVE-2023-22809 affecting package sudo for versions less than 1.9.12p2-1
2023-02-24 01:54:46
debiancve
debiancve
mageia
mageia
Updated sudo packages fix security vulnerability
2023-01-24 10:58:25
rocky
rocky
sudo security update
2023-01-23 08:22:52
githubexploit
githubexploit
Exploit for Improper Privilege Management in Sudo Project Sudo
2023-06-08 18:39:44
Exploit for Improper Privilege Management in Sudo Project Sudo
2024-08-26 06:27:59
Exploit for Improper Privilege Management in Sudo Project Sudo
2024-08-28 14:22:53
vulnrichment
vulnrichment
CVE-2022-45143 Apache Tomcat: JsonErrorReportValve escaping
2023-01-03 18:12:28
fedora
fedora
[SECURITY] Fedora 36 Update: sudo-1.9.12-2.p2.fc36
2023-02-05 01:54:10
[SECURITY] Fedora 37 Update: sudo-1.9.12-1.p2.fc37
2023-01-22 01:52:00
oraclelinux
oraclelinux
sudo security update
2023-01-23 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-06-02 16:20:56
rosalinux
rosalinux
Advisory ROSA-SA-2024-2396
2024-04-11 07:39:43
Advisory ROSA-SA-2023-2075
2023-01-31 12:50:07
almalinux
almalinux
Important: sudo security update
2023-01-23 00:00:00
amazon
amazon
Important: sudo
2023-03-02 22:36:00
alpinelinux
alpinelinux
CVE-2023-22809
2023-01-18 17:15:10
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.007
Percentile
80.5%
Related for PHSA-2023-3.0-0518