[월:] 2023년 08월

CVE-2023-3899

Posted on by admin

CVE-2023-3899

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.

Source: CVE-2023-3899

CVE-2023-41104

Posted on by admin

CVE-2023-41104

libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the exact attack surface will depend on the particular VCL (Varnish Configuration Language) configuration in use.

Source: CVE-2023-41104

CVE-2023-41105

Posted on by admin

CVE-2023-41105

An issue was discovered in Python 3.11 through 3.11.4. If a path containing ‘{$content}’ bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first ‘{$content}’ byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier, but that filename is no longer rejected in Python 3.11.x.

Source: CVE-2023-41105