Several recently discovered critical vulnerabilities:
- CVE-2022-24834 — a vulnerability in the Redis database management system that allows for buffer overflow in the cjson and cmsgpack libraries when executing specially crafted Lua scripts. The vulnerability can potentially lead to remote code execution on server. The issue manifests starting from Redis 2.6 and is fixed in releases 7.0.12, 6.2.13, and 6.0.20. As a workaround for protection, users can be prevented from executing EVAL and EVALSHA commands via ACL.
- CVE-2023-36824 — a vulnerability in the Redis database management system that causes a buffer overflow when handling key names passed through the COMMAND GETKEYS or COMMAND GETKEYSANDFLAGS commands, as well as lists of keys in ACL rules. The vulnerability can potentially lead to remote code execution on the server. The issue only affects version 7.0.x and is fixed in release 7.0.12.
- CVE-2022-23537 — a vulnerability in the Asterisk communication platform that leads to buffer overflow when parsing proxy server specially crafted STUN messages containing an unknown attribute. The issue occurs when using the ICE or WebRTC protocols in Asterisk. The vulnerability has been fixed in releases 16.30.1, 18.18.1, 19.8.1, and 20.3.1.
- CVE-2023-36664 — a vulnerability in Ghostscript, a suite of tools for processing, converting, and generating documents in PostScript and PDF formats, that allows arbitrary code execution when opening specially crafted PostScript documents. The issue is caused by improper handling of filenames that begin with the character ‘|’ or the prefix %pipe%. The vulnerability has been fixed in release Ghostscript 10.01.2.
In many environments, Ghostscript is invoked during thumbnail creation on desktops or during background data indexing, making it possible to exploit simply by uploading a file with an exploit or browsing a directory containing it in Nautilus. An attack on server systems can be organized through image handlers based on ImageMagick and GraphicsMagick packages, which invoke Ghostscript when processing JPEG or PNG files that contain PostScript code instead of an image (this file will be processed in Ghostscript since the MIME type is recognized by content rather than relying on the extension).
- CVE-2023-36475 — a vulnerability in Parse Server, a backend for Node.js that works with the Express web framework, allowing for remote code execution on the server. The vulnerability enables the prototype pollution method in JavaScript objects to execute arbitrary code through the MongoDB BSON parser. It has been rated with a severity level of 9.8 out of 10. The issue has been resolved in parse-server updates 5.5.2 and 6.2.1.
Source: opennet.ru
