Multiple vulnerabilities in cflinuxfs3

1) Improper Authentication

EUVDB-ID: #VU18438

Risk: Medium

CVSSv4.0: 5.2 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2018-16860

CWE-ID: CWE-287 - Improper Authentication

Exploit availability: No

Description

The vulnerability allows a remote authenticated user to compromise vulnerable domain.

The vulnerability exists due to an error within the process of obtaining kerberos ticket for a service from the Kerberos Key Distribution Center (KDC) that involves S4U2Self and S4U2Proxy extensions. A remote authenticated user can impersonate another service on the network and obtain elevated privileges within the domain.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable Active Directory implementation.

Mitigation

Install update from vendor's website.

Vulnerable software versions

cflinuxfs3: 0.0.0 - 0.327.0

CPE2.3

• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.2:*:*:*:*:*:*:*

External links

https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.328.0

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Key management errors

EUVDB-ID: #VU29242

Risk: Low

CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-12098

CWE-ID: CWE-320 - Key Management Errors

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a Man-in-the-Middle (MitM) attack.

The vulnerability exists due to Heimdal fails to verify anonymous PKINIT PA-PKINIT-KX key exchange within the krb5_init_creds_step() function in lib/krb5/init_creds_pw.c. A remote attacker can perform a MitM attack against the Heimdal client.

Mitigation

Install update from vendor's website.

Vulnerable software versions

cflinuxfs3: 0.0.0 - 0.327.0

CPE2.3

• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.2:*:*:*:*:*:*:*

External links

https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.328.0

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) NULL pointer dereference

EUVDB-ID: #VU57324

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-3671

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the way samba kerberos server handles missing sname attribute in TGS-REQ (Ticket Granting Server - Request). A remote authenticated user can send a specially crafted request to the samba server and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

cflinuxfs3: 0.0.0 - 0.327.0

CPE2.3

• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.2:*:*:*:*:*:*:*

External links

https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.328.0

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) NULL pointer dereference

EUVDB-ID: #VU68303

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-3116

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in lib/gssapi/spnego/accept_sec_context.c. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

cflinuxfs3: 0.0.0 - 0.327.0

CPE2.3

• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.2:*:*:*:*:*:*:*

External links

https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.328.0

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) NULL pointer dereference

EUVDB-ID: #VU68298

Risk: Medium

CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-4217

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in unzip when handling Unicode strings. A remote attacker can trick the victim to open a specially crafted archive and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

cflinuxfs3: 0.0.0 - 0.327.0

CPE2.3

• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.2:*:*:*:*:*:*:*

External links

https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.328.0

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Heap-based buffer overflow

EUVDB-ID: #VU63289

Risk: High

CVSSv4.0: 7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber]

CVE-ID: CVE-2022-0530

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: Yes

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A remote attacker can pass specially crafted data to the application, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

cflinuxfs3: 0.0.0 - 0.327.0

CPE2.3

• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.2:*:*:*:*:*:*:*

External links

https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.328.0

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

7) Out-of-bounds write

EUVDB-ID: #VU66220

Risk: High

CVSSv4.0: 7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber]

CVE-ID: CVE-2022-0529

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: Yes

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing zip archives during the conversion of a UTF-8 string to a local string. A remote attacker can create a specially crafted zip file, trick the victim into opening it using the affected software, trigger out-of-bounds write and execute arbitrary code on the target system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

cflinuxfs3: 0.0.0 - 0.327.0

CPE2.3

• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.2:*:*:*:*:*:*:*

External links

https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.328.0

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

8) Integer overflow

EUVDB-ID: #VU63553

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-43618

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to integer overflow in mpz/inp_raw.c. A remote attacker can pass specially crafted data to the application, trigger integer overflow and cause a denial of service condition on the target system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

cflinuxfs3: 0.0.0 - 0.327.0

CPE2.3

• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:cloud_foundry_foundation:cflinuxfs3:0.0.2:*:*:*:*:*:*:*

External links

https://github.com/cloudfoundry/cflinuxfs3/releases/tag/0.328.0

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.