apk package
chainguard/logstash-jre-bcfips
pkg:apk/chainguard/logstash-jre-bcfips
Vulnerabilities (43)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-25126 | Med | 5.3 | < 8.13.2-r0 | 8.13.2-r0 | Feb 29, 2024 | Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack’s media type parser to take much longer than expected, leading to a possible denial of service vulnerability (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1 | |
| CVE-2023-36617 | Med | 5.3 | < 8.15.0-r0 | 8.15.0-r0 | Jun 29, 2023 | A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue | |
| CVE-2020-16971 | Hig | 7.4 | < 8.16.0-r0 | 8.16.0-r0 | Dec 10, 2020 | Azure SDK for Java Security Feature Bypass Vulnerability |
- affected < 8.13.2-r0fixed 8.13.2-r0
Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack’s media type parser to take much longer than expected, leading to a possible denial of service vulnerability (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1
- affected < 8.15.0-r0fixed 8.15.0-r0
A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue
- affected < 8.16.0-r0fixed 8.16.0-r0
Azure SDK for Java Security Feature Bypass Vulnerability
Page 3 of 3