An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause frequent, repeated pauses. We recommend upgrading libraries beyond the vulnerable versions.

The version of python-tensorboard / pytorch installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-22569 advisory.

  - An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a     way that would be processed out of order. A small malicious payload can occupy the parser for several     minutes by creating large numbers of short-lived objects that cause frequent, repeated pauses. We     recommend upgrading libraries beyond the vulnerable versions. (CVE-2021-22569)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a     way that would be processed out of order. A small malicious payload can occupy the parser for several     minutes by creating large numbers of short-lived objects that cause frequent, repeated pauses. We     recommend upgrading libraries beyond the vulnerable versions. (CVE-2021-22569)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a
    way that would be processed out of order. A small malicious payload can occupy the parser for several
    minutes by creating large numbers of short-lived objects that cause frequent, repeated pauses. We
    recommend upgrading libraries beyond the vulnerable versions. (CVE-2021-22569)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2023-0808 advisory.

  - The go command may execute arbitrary code at build time when using cgo. This may occur when running go     get on a malicious module, or when running any other command which builds untrusted code. This is can by     triggered by linker flags, specified via a #cgo LDFLAGS directive. Flags containing embedded spaces are     mishandled, allowing disallowed flags to be smuggled through the LDFLAGS sanitization by including them in     the argument of another flag. This only affects usage of the gccgo compiler. (CVE-2023-29405)

  - When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by     finalizing the operation with a rename from a temporary name to the final target file name.In that rename     operation, it might accidentally *widen* the permissions for the target file, leaving the updated file     accessible to more users than intended. (CVE-2022-32207)

  - decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. (CVE-2022-38900)

  - The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.
    (CVE-2022-33987)

  - Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the     name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3. (CVE-2022-37601)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Atlassian Jira Service Management Data Center and Server (Jira Service Desk) running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-14753 advisory.

  - An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a     way that would be processed out of order. A small malicious payload can occupy the parser for several     minutes by creating large numbers of short-lived objects that cause frequent, repeated pauses. We     recommend upgrading libraries beyond the vulnerable versions. (CVE-2021-22569)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2783-2 advisory.

    grpc:
    - Update in SLE-15 (bsc#1197726, bsc#1144068)

    protobuf:
    - Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941, bsc#1203681
    - Fix a potential DoS issue when parsing with binary data in  protobuf-java, CVE-2022-3171, bsc#1204256
    - Fix potential Denial of Service in protobuf-java in the parsing procedure for binary data,     CVE-2021-22569, bsc#1194530
    - Add missing dependency of python subpackages on python-six (bsc#1177127)
    - Updated to version 3.9.2 (bsc#1162343)
      * Remove OSReadLittle* due to alignment requirements.
      * Don't use unions and instead use memcpy for the type swaps.
    - Disable LTO (bsc#1133277)

    python-aiocontextvars:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

    python-avro:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

    python-cryptography:
    - update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331)
      * SECURITY ISSUE: Fixed a bug where certain sequences of update()         calls when symmetrically encrypting very large payloads (>2GB) could         result in an integer overflow, leading to buffer overflows.
      CVE-2020-36242

    python-cryptography-vectors:
    - update to 3.2 (bsc#1178168, CVE-2020-25659):
      * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,         to protect against Bleichenbacher vulnerabilities. Due to limitations imposed         by our API, we cannot completely mitigate this vulnerability.
      * Support for OpenSSL 1.0.2 has been removed.
      * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
    - update to 3.3.2 (bsc#1198331)

    python-Deprecated:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - update to 1.2.13:

    python-google-api-core:
    - Update to 1.14.2

    python-googleapis-common-protos:
    - Update to 1.6.0

    python-grpcio-gcp:
    - Initial spec for v0.2.2

    python-humanfriendly:
    - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Update to 10.0

    python-jsondiff:
    - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Update to version 1.3.0

    python-knack:
    - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Update to version 0.9.0

    python-opencensus:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Disable Python2 build
    - Update to 0.8.0

    python-opencensus-context:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

    python-opencensus-ext-threading:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Initial build version 0.1.2

    python-opentelemetry-api:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Version update to 1.5.0

    python-psutil:
    - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - update to 5.9.1
    - remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on     MicroOS. (bsc#1184753)
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

    python-PyGithub:
    - Update to 1.43.5:

    python-pytest-asyncio:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Initial release of python-pytest-asyncio 0.8.0

    python-requests:
    - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

    python-websocket-client:
    - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Update to version 1.3.2

    python-websockets:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - update to 9.1:

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2783-1 advisory.

    grpc:
    - Update in SLE-15 (bsc#1197726, bsc#1144068)

    protobuf:
    - Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941, bsc#1203681
    - Fix a potential DoS issue when parsing with binary data in  protobuf-java, CVE-2022-3171, bsc#1204256
    - Fix potential Denial of Service in protobuf-java in the parsing procedure for binary data,     CVE-2021-22569, bsc#1194530
    - Add missing dependency of python subpackages on python-six (bsc#1177127)
    - Updated to version 3.9.2 (bsc#1162343)
      * Remove OSReadLittle* due to alignment requirements.
      * Don't use unions and instead use memcpy for the type swaps.
    - Disable LTO (bsc#1133277)

    python-aiocontextvars:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

    python-avro:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

    python-cryptography:
    - update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331)
      * SECURITY ISSUE: Fixed a bug where certain sequences of update()         calls when symmetrically encrypting very large payloads (>2GB) could         result in an integer overflow, leading to buffer overflows.
      CVE-2020-36242

    python-cryptography-vectors:
    - update to 3.2 (bsc#1178168, CVE-2020-25659):
      * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,         to protect against Bleichenbacher vulnerabilities. Due to limitations imposed         by our API, we cannot completely mitigate this vulnerability.
      * Support for OpenSSL 1.0.2 has been removed.
      * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
    - update to 3.3.2 (bsc#1198331)

    python-Deprecated:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - update to 1.2.13:

    python-google-api-core:
    - Update to 1.14.2

    python-googleapis-common-protos:
    - Update to 1.6.0

    python-grpcio-gcp:
    - Initial spec for v0.2.2

    python-humanfriendly:
    - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Update to 10.0

    python-jsondiff:
    - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Update to version 1.3.0

    python-knack:
    - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Update to version 0.9.0

    python-opencensus:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Disable Python2 build
    - Update to 0.8.0

    python-opencensus-context:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

    python-opencensus-ext-threading:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Initial build version 0.1.2

    python-opentelemetry-api:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Version update to 1.5.0

    python-psutil:
    - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - update to 5.9.1
    - remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on     MicroOS. (bsc#1184753)
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

    python-PyGithub:
    - Update to 1.43.5:

    python-pytest-asyncio:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Initial release of python-pytest-asyncio 0.8.0

    python-requests:
    - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

    python-websocket-client:
    - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - Update to version 1.3.2

    python-websockets:
    - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
    - update to 9.1:

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of IBM Cognos Analytics installed on the remote host is 11.1.x prior to 11.1.7 Fix Pack 7 or 11.2.x prior to 11.2.4 FP1. It is, therefore, affected by multiple vulnerabilities, including the following:

  - GNOME libxml2 could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free     flaw in the xmlXIncludeDoProcess() function in xinclude.c. By sending a specially-crafted file, an attacker could     exploit this vulnerability to execute arbitrary code on the system. (CVE-2021-3518)

  - Node.js could allow a local attacker to gain elevated privileges on the system, caused by the DLL search order     hijacking of providers.dll. By placing a specially crafted file, an attacker could exploit this vulnerability     to escalate privileges. (CVE-2022-32223)

  - Node.js marked module is vulnerable to a denial of service, caused by a regular expression denial of service     (ReDoS) flaw in inline.reflinkSearch. By sending a specially-crafted regex input, a remote attacker could exploit     this vulnerability to cause a denial of service condition. (CVE-2022-21681)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle WebLogic Server installed on the remote host is missing a security patch from the April 2023 Critical Patch Update (CPU). It is, therefore, affected by multiple vulnerabilities, including:

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console     (Apache Commons FileUpload)). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and     14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP     to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized     ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server.
    (CVE-2023-24998)

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples     (XStream)). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic     Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Oracle WebLogic Server. (CVE-2022-40152)

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Third Party     (Apache Commons Compress)). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily     exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise     Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. (CVE-2021-36090)

  Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3393 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3393-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Helmut Grohne     April 18, 2023                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : protobuf     Version        : 3.6.1.3-2+deb10u1     CVE ID         : CVE-2021-22569 CVE-2021-22570 CVE-2022-1941

    This update fixes a NULL pointer derference and two denial of service     conditions in in protobuf.

    CVE-2021-22569

        An issue in protobuf-java allowed the interleaving of         com.google.protobuf.UnknownFieldSet fields in such a way that would be         processed out of order. A small malicious payload can occupy the parser for         several minutes by creating large numbers of short-lived objects that cause         frequent, repeated pauses.

    CVE-2021-22570

        Nullptr dereference when a null char is present in a proto symbol. The         symbol is parsed incorrectly, leading to an unchecked call into the proto         file's name during generation of the resulting error message. Since the         symbol is incorrectly parsed, the file is nullptr.

    CVE-2022-1941

        A parsing vulnerability for the MessageSet type in the ProtocolBuffers can         lead to out of memory failures. A specially crafted message with multiple         key-value per elements creates parsing issues, and can lead to a Denial of         Service against services receiving unsanitized input.

    For Debian 10 buster, these problems have been fixed in version     3.6.1.3-2+deb10u1.

    We recommend that you upgrade your protobuf packages.

    For the detailed security status of protobuf please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/protobuf

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5945-1 advisory.

    It was discovered that Protocol Buffers did not properly validate field     com.google.protobuf.UnknownFieldSet in protobuf-java. An attacker could possibly use this issue to perform     a denial of service attack. This issue only affected protobuf Ubuntu 22.04 LTS and Ubuntu 22.10.
    (CVE-2021-22569)

    It was discovered that Protocol Buffers did not properly parse certain symbols. An attacker could possibly     use this issue to cause a denial of service or other unspecified impact. (CVE-2021-22570)

    It was discovered that Protocol Buffers did not properly manage memory when parsing specifically crafted     messages. An attacker could possibly use this issue to cause applications using protobuf to crash,     resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu     22.04 LTS and Ubuntu 22.10. (CVE-2022-1941)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3922-1 advisory.

    - CVE-2021-22569: Fixed Denial of Service in protobuf-java in the parsing procedure for binary data     (bsc#1194530).
    - CVE-2022-1941: Fix a potential DoS issue in protobuf-cpp and protobuf-python (bsc#1203681)
    - CVE-2022-3171: Fix a potential DoS issue when parsing with binary data in protobuf-java (bsc#1204256)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2022 CPU advisory.

  - Vulnerability in the Oracle Database - Enterprise Edition Sharding component of Oracle Database Server.
    The supported version that is affected is 19c. Easily exploitable vulnerability allows high privileged     attacker having Create Any Procedure privilege with network access via Oracle Net to compromise Oracle     Database - Enterprise Edition Sharding. Successful attacks of this vulnerability can result in takeover of     Oracle Database - Enterprise Edition Sharding. (CVE-2022-21410)

  - Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are     12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create     Procedure privilege with network access via multiple protocols to compromise Java VM. Successful attacks     of this vulnerability can result in unauthorized creation, deletion or modification access to critical     data or all Java VM accessible data. (CVE-2022-21498)

  - Vulnerability in the RDBMS Gateway / Generic ODBC Connectivity component of Oracle Database Server.
    Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows     low privileged attacker having Create Session privilege with network access via Oracle Net to compromise     RDBMS Gateway / Generic ODBC Connectivity. Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of RDBMS Gateway / Generic ODBC Connectivity     accessible data as well as unauthorized read access to a subset of RDBMS Gateway / Generic ODBC     Connectivity accessible data. (CVE-2022-21411)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
295632	Azure Linux 3.0 Security Update: python-tensorboard / pytorch (CVE-2021-22569)	Nessus	Azure Linux Local Security Checks	medium
252471	Linux Distros Unpatched Vulnerability : CVE-2021-22569	Nessus	Misc.	medium
420110	SCA: security update for com.google.protobuf:protobuf-java, com.google.protobuf:protobuf-kotlin, google-protobuf (GHSA-wrvw-hg22-4m67)	Tenable Cloud Security	SCA Checks	medium
420110	SCA: security update for com.google.protobuf:protobuf-java, com.google.protobuf:protobuf-kotlin, google-protobuf (GHSA-wrvw-hg22-4m67)	Tenable Self-Hosted Container Security	SCA Checks	medium
194928	Splunk Enterprise 8.2.0 < 8.2.12, 9.0.0 < 9.0.6, 9.1.0 < 9.1.1 (SVD-2023-0808)	Nessus	CGI abuses	critical
187945	Atlassian Jira Service Management Data Center and Server 4.20.x < 4.20.27 / 5.4.x < 5.4.11 (JSDSERVER-14753)	Nessus	Misc.	medium
181751	SUSE SLES15: libprotobuf-lite20 / python2-cryptography / python2-psutil / etc (SUSE-SU-2023:2783-2)	Nessus	SuSE Local Security Checks	high
178008	SUSE SLES15: libprotobuf-lite20 / python2-cryptography / python2-psutil / etc (SUSE-SU-2023:2783-1)	Nessus	SuSE Local Security Checks	high
175429	IBM Cognos Analytics Multiple Vulnerabilities (6986505)	Nessus	CGI abuses	critical
174464	Oracle WebLogic Server (Apr 2023 CPU)	Nessus	Misc.	high
174436	Debian dla-3393 : libprotobuf-dev - security update	Nessus	Debian Local Security Checks	high
172495	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Protocol Buffers vulnerabilities (USN-5945-1)	Nessus	Ubuntu Local Security Checks	high
167241	SUSE SLED15: libprotobuf-lite20 / libprotobuf-lite20-32bit / libprotobuf20 / etc (SUSE-SU-2022:3922-1)	Nessus	SuSE Local Security Checks	high
160079	Oracle Database Server (Apr 2022 CPU)	Nessus	Databases	medium

Detections

Analytics

CVE-2021-22569

medium

Tenable Plugins

medium

medium

medium

medium

critical

medium

high

high

critical

high

high

high

high

medium