The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083.

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-4499:01 advisory.

    * python-flask: Denial of Service via crafted JSON file (CVE-2018-1000656)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:0870 advisory.

  - The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability     in flask that can result in Large amount of memory usage possibly leading to denial of service. This     attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability     appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083. (CVE-2018-1000656)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The versions of Oracle Business Intelligence Enterprise Edition (OBIEE) (OAS) installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2023 CPU advisory.

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Analytics Server (Apache Commons BeanUtils)). The supported version that is affected is     6.4.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP     to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability     can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence     Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business     Intelligence Enterprise Edition accessible data and unauthorized ability to cause a partial denial of     service (partial DOS) of Oracle Business Intelligence Enterprise Edition. (CVE-2019-10086)

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Analytics Server (zlib)). The supported version that is affected is 6.4.0.0.0. Easily     exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise     Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in     takeover of Oracle Business Intelligence Enterprise Edition. (CVE-2022-37434)

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: BI Application Archive (Apache Commons Text)). The supported version that is affected is     6.4.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP     to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability     can result in takeover of Oracle Business Intelligence Enterprise Edition. (CVE-2022-42889)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4378-1 advisory.

    It was discovered that Flask incorrectly handled certain inputs. An attacker could possibly use this issue     to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:0870 advisory.

    Flask is a lightweight but extensible web development framework for Python based on the Werkzeug WSGI     toolkit, and the Jinja 2 template engine.

    Security Fix(es):

    * python-flask: Denial of Service via crafted JSON file (CVE-2018-1000656)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Flask, a micro web framework for Python contains a CWE-20: Improper Input Validation vulnerability that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding.

For Debian 8 'Jessie', this problem has been fixed in version 0.10.1-2+deb8u1.

We recommend that you upgrade your flask packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python-Flask to version 0.12.4 fixes the following issues :

Security issue fixed :

  - CVE-2018-1000656: Fixed an improper input validation     vulnerability in flask that can result in Large amount     of memory usage possibly leading to denial of service.
    (bsc#1106279)

This update was imported from the SUSE:SLE-15:Update update project.

The version of Pallets Flask on the remote host is prior to 0.12.3.
It is, therefore, affected by a denial of service vulnerability in the JSON decoding process due to improper input validation. An unauthenticated attacker can exploit this issue by providing JSON data in a non-text related encoding, which could result in unexpected memory use.

ID	Name	Product	Family	Severity
294315	MiracleLinux 7 : python-flask-0.10.1-5.el7 (AXSA:2020-4499:01)	Nessus	Miracle Linux Local Security Checks	high
208546	CentOS 7 : python-flask (RHSA-2020:0870)	Nessus	CentOS Local Security Checks	high
174743	Oracle Business Intelligence Enterprise Edition (OAS) (Apr 2023 CPU)	Nessus	Misc.	critical
137044	Ubuntu 16.04 LTS / 18.04 LTS : Flask vulnerability (USN-4378-1)	Nessus	Ubuntu Local Security Checks	high
134674	RHEL 7 : python-flask (RHSA-2020:0870)	Nessus	Red Hat Local Security Checks	high
128038	Debian DLA-1892-1 : flask security update	Nessus	Debian Local Security Checks	high
123659	openSUSE Security Update : python-Flask (openSUSE-2019-1112)	Nessus	SuSE Local Security Checks	high
119778	Flask < 0.12.3 Denial of Service Vulnerability	Nessus	CGI abuses	high

Detections

Analytics

CVE-2018-1000656

high

Tenable Plugins

high

high

critical

high

high

high

high

high