Lucene search
PhotonPHSA-2023-5.0-0140HistoryNov 09, 2023 - 12:00 a.m.
Critical Photon OS Security Update - PHSA-2023-5.0-0140
2023-11-0900:00:00
github.com
15
photon os
security update
pgbouncer
memcached
phsa-2023-5.0-0140
unix
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.002
Percentile
56.0%
Updates of [‘memcached’, ‘pgbouncer’] packages of Photon OS have been released.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Photon | 5.0 | x86_64 | memcached-devel | < 1.6.22-1.ph5 | memcached-devel-1.6.22-1.ph5.x86_64.rpm |
| Photon | 5.0 | x86_64 | memcached | < 1.6.22-1.ph5 | memcached-1.6.22-1.ph5.x86_64.rpm |
| Photon | 5.0 | x86_64 | pgbouncer | < 1.17.0-4.ph5 | pgbouncer-1.17.0-4.ph5.x86_64.rpm |
Related
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0509
2023-11-10 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0685
2023-11-09 00:00:00
Moderate Photon OS Security Update - PHSA-2021-4.0-0079
2021-08-12 00:00:00
nessus
nessus
Photon OS 5.0: Memcached PHSA-2023-5.0-0140
2024-07-23 00:00:00
Photon OS 4.0: Memcached PHSA-2023-4.0-0509
2024-07-24 00:00:00
Ubuntu 22.04 LTS / 23.04 / 23.10 : Memcached vulnerabilities (USN-6476-1)
2023-11-13 00:00:00
osv
osv
memcached-1.6.22-1.1 on GA media
2024-06-15 00:00:00
memcached vulnerabilities
2023-11-13 15:26:54
CVE-2023-46852
2023-10-27 20:15:09
openvas
openvas
Ubuntu: Security Advisory (USN-6476-1)
2023-11-14 00:00:00
Fedora: Security Advisory for mingw-c-ares (FEDORA-2021-c83b66abdb)
2021-08-19 00:00:00
Fedora: Security Advisory for c-ares (FEDORA-2021-0a60cbb948)
2021-08-18 00:00:00
ubuntu
ubuntu
Memcached vulnerabilities
2023-11-13 00:00:00
c-ares vulnerability
2021-08-10 00:00:00
c-ares vulnerability
2021-08-10 00:00:00
redos
redos
ROS-20240412-01
2024-04-12 00:00:00
cve
cve
prion
prion
Buffer overflow
2023-10-27 20:15:00
Code injection
2023-10-27 20:15:00
Input validation
2021-11-23 19:15:00
alpinelinux
alpinelinux
cbl_mariner
cbl_mariner
CVE-2023-46852 affecting package memcached for versions less than 1.6.27-1
2024-06-21 09:32:44
CVE-2023-46853 affecting package memcached for versions less than 1.6.22-1
2023-11-15 20:12:47
CVE-2023-46853 affecting package memcached for versions less than 1.6.27-1
2024-06-21 09:32:44
nvd
nvd
debiancve
debiancve
vulnrichment
vulnrichment
CVE-2023-46853
2023-10-27 00:00:00
CVE-2023-46852
2023-10-27 00:00:00
redhatcve
redhatcve
ubuntucve
ubuntucve
veracode
veracode
Off-by-one Error
2023-10-29 10:30:29
Buffer Overflows
2023-10-29 10:30:21
Buffer Overflows
2023-10-30 07:02:17
cvelist
cvelist
fedora
fedora
[SECURITY] Fedora 34 Update: c-ares-1.17.2-1.fc34
2021-08-18 01:13:01
[SECURITY] Fedora 34 Update: mingw-c-ares-1.17.2-1.fc34
2021-08-19 01:08:18
[SECURITY] Fedora 33 Update: mingw-c-ares-1.17.2-1.fc33
2021-08-19 01:11:17
suse
suse
Security update for c-ares (important)
2021-08-17 00:00:00
Security update for c-ares (important)
2021-08-19 00:00:00
almalinux
almalinux
Moderate: c-ares security update
2022-05-10 08:14:29
amazon
amazon
Medium: c-ares
2021-10-29 16:37:00
Medium: c-ares
2024-01-03 21:04:00
altlinux
altlinux
Security fix for the ALT Linux 9 package c-ares version 1.17.2-alt1
2021-08-19 00:00:00
github
github
gitlab
gitlab
redhat
redhat
(RHSA-2022:2043) Moderate: c-ares security update
2022-05-10 08:14:29
freebsd
freebsd
py39-pycares -- domain hijacking vulnerability
2021-06-11 00:00:00
archlinux
archlinux
[ASA-202108-13] c-ares: insufficient validation
2021-08-10 00:00:00
debian
debian
[SECURITY] [DSA 4954-1] c-ares security update
2021-08-10 07:10:36
[SECURITY] [DSA 4954-1] c-ares security update
2021-08-10 07:10:36
[SECURITY] [DLA 2738-1] c-ares security update
2021-08-10 07:18:07
mageia
mageia
Updated c-ares packages fix security vulnerability
2021-10-02 21:57:04
oraclelinux
oraclelinux
c-ares security update
2022-05-17 00:00:00
rocky
rocky
c-ares security update
2022-05-10 08:14:29
vmware
vmware
hivepro
hivepro
VMware Unveils Critical Authentication Bypass Vulnerability in VCD Appliance
2023-11-17 08:07:39
f5
f5
K53225395 : Node.js vulnerabilities CVE-2021-3672 and CVE-2021-22931
2021-10-15 00:00:00
zdt
zdt
VMware Cloud Director 10.5 - Bypass identity verification Exploit
2024-03-12 00:00:00
VMware Cloud Director - Bypass identity verification Exploit
2023-12-08 00:00:00
packetstorm
packetstorm
VMware Cloud Director 10.5 Authentication Bypass
2024-03-13 00:00:00
exploitdb
exploitdb
VMware Cloud Director 10.5 - Bypass identity verification
2024-03-12 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2246
2023-10-17 12:06:48
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.002
Percentile
56.0%
Related for PHSA-2023-5.0-0140