Multiple vulnerabilities in Red Hat Migration Toolkit for Containers

1) Heap-based buffer overflow

EUVDB-ID: #VU53844

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2018-25011

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in PutLE16() function in libwebp.  A remote attacker can create a specially crafted file, trick the victim into opening it, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) NULL pointer dereference

EUVDB-ID: #VU54223

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-3537

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Use-after-free

EUVDB-ID: #VU54454

Risk: Low

CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-33034

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in net/bluetooth/hci_event.c when destroying an hci_chan. A local user can escalate privileges on the system.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Uncontrolled Recursion

EUVDB-ID: #VU54910

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-31525

CWE-ID: CWE-674 - Uncontrolled Recursion

Exploit availability: No

The vulnerability allows a remote attacker to perform a DoS attack.

The vulnerability exists due to uncontrolled recursion when processing HTTP headers. A remote attacker can send a large header to ReadRequest or ReadResponse and perform a denial of service (DoS) attack.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Integer overflow

EUVDB-ID: #VU51456

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-27219

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to integer overflow within the g_bytes_new() function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. A local user can run a specially crafted program to trigger an integer overflow and execute arbitrary code with elevated privileges.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU52495

Risk: Low

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-21645

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

The vulnerability allows a remote attacker to gain access to sensitive information on the system..

The vulnerability exists due to the affected plugin does not perform permission checks in several HTTP endpoints. A remote authenticated attacker can enumerate configuration file IDs.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Cross-site request forgery

EUVDB-ID: #VU52494

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-21644

CWE-ID: CWE-352 - Cross-Site Request Forgery (CSRF)

Exploit availability: No

The vulnerability allows a remote attacker to perform cross-site request forgery attacks.

The vulnerability exists due to insufficient validation of the HTTP request origin. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU52493

Risk: Low

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-21643

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

The vulnerability allows a remote attacker to gain access to sensitive information on the system.

The vulnerability exists due to the affected plugin does not correctly perform permission checks in several HTTP endpoints. A remote authenticated attacker can enumerate system-scoped credentials IDs of credentials stored in Jenkins

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) XML External Entity injection

EUVDB-ID: #VU52492

Risk: Medium

CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-21642

CWE-ID: CWE-611 - Improper Restriction of XML External Entity Reference ('XXE')

Exploit availability: No

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to insufficient validation of user-supplied XML input. A remote authenticated attacker can pass a specially crafted XML code to the affected application and view contents of arbitrary files on the system or initiate requests to external systems.

Successful exploitation of the vulnerability may allow an attacker to view contents of arbitrary file on the server or perform network scanning of internal and external infrastructure.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Insufficient verification of data authenticity

EUVDB-ID: #VU54477

Risk: Medium

CVSSv4.0: 4.8 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-20271

CWE-ID: CWE-345 - Insufficient Verification of Data Authenticity

Exploit availability: No

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to an error in RPM's signature check functionality when reading package files. A remote attacker can create a specially crafted package with a modified signature header, trick the victim into installing and compromise the affected system.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Input validation error

EUVDB-ID: #VU53289

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-3541

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Integer overflow

EUVDB-ID: #VU53439

Risk: High

CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2021-3520

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow in the fast LZ compression algorithm library. A remote attacker can pass specially crafted archive, trick the victim into opening it, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Allocation of Resources Without Limits or Throttling

EUVDB-ID: #VU47910

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2020-25648

CWE-ID: CWE-770 - Allocation of Resources Without Limits or Throttling

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to system availability. This flaw affects NSS versions before 3.58.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Use-after-free

EUVDB-ID: #VU54225

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2021-3518

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error in libxml2. A remote attacker can use a specially crafted file and execute arbitrary code on the target system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Out-of-bounds write

EUVDB-ID: #VU54224

Risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2021-3517

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input in the xml entity encoding functionality. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger out-of-bounds write and execute arbitrary code on the target system.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Use-after-free

EUVDB-ID: #VU54222

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2021-3516

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error in xmllint. A remote attacker can use a specially crafted file to execute arbitrary code on the target system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Use-after-free

EUVDB-ID: #VU53842

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2020-36329

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error in libwebp. A remote attacker can trick the victim to open a specially crafted file, trigger a use-after-free error and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Heap-based buffer overflow

EUVDB-ID: #VU53843

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2020-36328

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in WebPDecodeRGBInto function in libwebp.  A remote attacker can create a specially crafted file, trick the victim into opening it, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) Improper input validation

EUVDB-ID: #VU52385

Risk: Medium

CVSSv4.0: 5.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2020-27223

CWE-ID: CWE-20 - Improper input validation

Exploit availability: Yes

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The vulnerability exists due to improper input validation within the General (Eclipse Jetty) component in Oracle REST Data Services. A remote non-authenticated attacker can exploit this vulnerability to perform service disruption.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) Improper input validation

EUVDB-ID: #VU52502

Risk: Medium

CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2020-27218

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to manipulate or delete data.

The vulnerability exists due to improper input validation within the SC Admin server (Eclipse Jetty) component in Oracle Communications Converged Application Server - Service Controller. A remote non-authenticated attacker can exploit this vulnerability to manipulate or delete data.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) Race condition

EUVDB-ID: #VU48942

Risk: Low

CVSSv4.0: 5.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/U:Clear]

CVE-ID: CVE-2020-27216

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition. On Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the attacker wins the race then they will have read and write permission to the subdirectory used to unpack web applications, including their WEB-INF/lib jar files and JSP files. If any code is ever executed out of this temporary directory, this can lead to a local privilege escalation vulnerability.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Protection Mechanism Failure

EUVDB-ID: #VU54455

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2020-26541

CWE-ID: CWE-693 - Protection Mechanism Failure

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c. A local user can escalate privileges on the system.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) NULL pointer dereference

EUVDB-ID: #VU48143

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2020-25692

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in slapd normalization handling with modrdn. A remote non-authenticated attacker can send specially crafted packet to the slapd daemon and perform a denial of service (DoS) attack.

Install updates from vendor's website.

Migration Toolkit for Containers: 1.4.0 - 1.4.5

• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.0:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:red_hat:migration_toolkit_for_containers:1.4.2:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2021:2854

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.