CVE-2023-0852
published 2023-05-11CVE-2023-0852: Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker…
PriorityP258critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.14%
66.4th percentile
Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier sold in Japan. Color imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware Ver.11.04 and earlier sold in US. i-SENSYS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series, C1127P, C1127iF, C1127i firmware Ver.11.04 and earlier sold in Europe.
Affected
46 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canon | i-sensys_lbp621cw_firmware | <= 11.04 | — |
| canon | i-sensys_lbp623cdw_firmware | <= 11.04 | — |
| canon | i-sensys_lbp633cdw_firmware | <= 11.04 | — |
| canon | i-sensys_lbp664cx_firmware | <= 11.04 | — |
| canon | i-sensys_mf641cw_firmware | <= 11.04 | — |
| canon | i-sensys_mf643cdw_firmware | <= 11.04 | — |
| canon | i-sensys_mf645cx_firmware | <= 11.04 | — |
| canon | i-sensys_mf742cdw_firmware | <= 11.04 | — |
| canon | i-sensys_mf744cdw_firmware | <= 11.04 | — |
| canon | i-sensys_mf746cx_firmware | <= 11.04 | — |
| canon | i-sensys_x_c1127i_firmware | <= 11.04 | — |
| canon | i-sensys_x_c1127if_firmware | <= 11.04 | — |
| canon | i-sensys_x_c1127p_firmware | <= 11.04 | — |
| canon | imageprograf_tc-20_firmware | <= 11.04 | — |
| canon | imageprograf_tc-20m_firmware | <= 11.04 | — |
| canon | lbp1127c_firmware | <= 11.04 | — |
| canon | lbp122dw_firmware | <= 11.04 | — |
| canon | lbp621c_firmware | <= 11.04 | — |
| canon | lbp622c_firmware | <= 11.04 | — |
| canon | lbp622cdw_firmware | <= 11.04 | — |
| canon | lbp623cdw_firmware | <= 11.04 | — |
| canon | lbp661c_firmware | <= 11.04 | — |
| canon | lbp662c_firmware | <= 11.04 | — |
| canon | lbp664c_firmware | <= 11.04 | — |
| canon | lbp664cdw_firmware | <= 11.04 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
bugzilla·2023-01-17·CVSS 5.3
CVE-2022-37436 [MEDIUM] CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client.
References:
https://httpd.apache.org/security/vulnerabilities_24.html
https://www.openwall.com/lists/oss-security/2023/01/17/7
Discussion:
Created httpd tracking bugs for this issue:
Affects: fedora-all [bug 2162094]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 8
Via RHSA-2023:0852 https://access.redhat.com/errata/RHSA-2023:0852
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Bugzilla
CVE-2022-36760 httpd: mod_proxy_ajp: Possible request smuggling
bugzilla·2023-01-17·CVSS 9.0
CVE-2022-36760 [CRITICAL] CVE-2022-36760 httpd: mod_proxy_ajp: Possible request smuggling
CVE-2022-36760 httpd: mod_proxy_ajp: Possible request smuggling
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.
References:
https://httpd.apache.org/security/vulnerabilities_24.html
https://www.openwall.com/lists/oss-security/2023/01/17/6
Discussion:
Created httpd tracking bugs for this issue:
Affects: fedora-all [bug 2162100]
---
Upstream fix is: https://svn.apache.org/viewvc?view=revision&revision=1906540
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 8
Via RHSA-2023:0852 https://access.r
Bugzilla
CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write of zero byte
bugzilla·2023-01-17·CVSS 7.5
CVE-2006-20001 [HIGH] CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write of zero byte
CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write of zero byte
A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier.
References:
https://httpd.apache.org/security/vulnerabilities_24.html
https://www.openwall.com/lists/oss-security/2023/01/17/5
Discussion:
Created httpd tracking bugs for this issue:
Affects: fedora-all [bug 2162098]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 8
Via RHSA-2023:0852 https://access.redhat.com/errata/RHSA-2023:0852
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Vi
https://canon.jp/support/support-info/230414vulnerability-responsehttps://psirt.canon/advisory-information/cp2023-001/https://www.canon-europe.com/support/product-security-latest-news/https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflowhttps://canon.jp/support/support-info/230414vulnerability-responsehttps://psirt.canon/advisory-information/cp2023-001/https://www.canon-europe.com/support/product-security-latest-news/https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Vulnerabilities-Remediation-Against-Buffer-Overflow
2023-05-11
Published