TI-2023-02479 CVE-2023-2650 · GHSA-gqxg-9vfr-p9cg
Possible DoS translating ASN.1 object identifiers
Priority HIGH 68
Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow.
RHSA-2023:7622
Red Hat JBoss Web Server 5.7.7 release and security update
Released 2023-12-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Web Server 5.7 for RHEL 7 Server jws5-tomcat-9.0.62-19.redhat_00017.1.el7jws, jws5-tomcat-admin-webapps-9.0.62-19.redhat_00017.1.el7jws, jws5-tomcat-docs-webapp-9.0.62-19.redhat_00017.1.el7jws +10
- Red Hat JBoss Web Server 5.7 for RHEL 8 jws5-tomcat-9.0.62-19.redhat_00017.1.el8jws, jws5-tomcat-admin-webapps-9.0.62-19.redhat_00017.1.el8jws, jws5-tomcat-docs-webapp-9.0.62-19.redhat_00017.1.el8jws +8
- Red Hat JBoss Web Server 5.7 for RHEL 9 jws5-tomcat-9.0.62-19.redhat_00017.1.el9jws, jws5-tomcat-admin-webapps-9.0.62-19.redhat_00017.1.el9jws, jws5-tomcat-docs-webapp-9.0.62-19.redhat_00017.1.el9jws +8
Fixes 7 records
TI-2023-00439 CVE-2023-0464 · GHSA-w2w6-xp88-5cvw
Excessive Resource Usage Verifying X.509 Policy Constraints
Priority MEDIUM 46
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints.
TI-2023-03220 CVE-2023-3446 · GHSA-3p3x-vg38-6g9q
Excessive time spent checking DH keys and parameters
Priority LOW 39
Issue summary: Checking excessively long DH keys or parameters may be very slow.
TI-2023-21704 CVE-2023-41080 · GHSA-q3mw-pvr8-9ggc
Apache Tomcat: Open redirect with FORM authentication
Priority LOW 37
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0…
TI-2023-03567 CVE-2023-3817 · GHSA-c945-cqj5-wfv6
Excessive time spent checking DH q parameter value
Priority LOW 36
Issue summary: Checking excessively long DH keys or parameters may be very slow.
TI-2023-00440 CVE-2023-0465 · GHSA-77f3-6546-6rj7
Invalid certificate policies in leaf certificates are silently ignored
Priority LOW 34
Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks.
TI-2023-00441 CVE-2023-0466 · GHSA-pxvj-4wx4-gv6w
Certificate policy check not enabled
Priority LOW 28
The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification.