VDB
BDU%3A2023-08648
BDU%3A2023-08648
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость сетевого программного средства Netty, связанная с некорректной обработкой управляющих символов, позволяющая нарушителю оказать воздействие на целостность защищаемой информации
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Сообщество свободного программного обеспечения, NetApp Inc., Red Hat Inc., Novell Inc., Canonical Ltd., АО "НППКТ", SonarSource, Apache Software Foundation | Oracle Communications Messaging Server, Debian GNU/Linux, OnCommand Workflow Automation, SnapCenter, OpenShift Application Runtimes, Red Hat Single Sign-On, Red Hat JBoss Fuse, Oracle Coherence, openSUSE Tumbleweed, Red Hat OpenStack Platform, Jboss Operations Network, Ubuntu, Red Hat JBoss Data Grid, A-MQ Clients, Oracle Communications Design Studio, OpenSUSE Leap, Red Hat JBoss A-MQ, OpenShift Logging, SUSE Linux Enterprise High Performance Computing, Suse Linux Enterprise Server, SUSE Linux Enterprise Server for SAP Applications, SUSE Manager Proxy, SUSE Manager Server, Suse Linux Enterprise Desktop, SUSE Linux Enterprise Module for Development Tools, Red Hat OpenShift Container Platform, Helidon, Oracle Communications Cloud Native Core Policy, SUSE Manager Retail Branch Server, Red Hat AMQ Online, SUSE Enterprise Storage, Decision Manager, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), SUSE Linux Enterprise Module for Package Hub, Red Hat JBoss Enterprise Application Platform, Oracle Communications Cloud Native Core Unified Data Repository, Red Hat Satellite, Communications Cloud Native Core Binding Support Function, Oracle Communications Cloud Native Core Network Slice Selection Function, Oracle Communications Cloud Native Core Security Edge Protection Proxy, Oracle PeopleSoft Enterprise PeopleTools, SonarQube, Logging subsystem for Red Hat OpenShift, Red Hat Data Grid, Red Hat Process Automation Manager, netty, quarkus, Oracle Banking Deposits and Lines of Credit Servicing, Oracle Banking Party Management, Oracle Banking Platform, Red Hat AMQ, Red Hat AMQ Streams, Red Hat build of Quarkus, Red Hat Fuse |
Timeline
- Dec 12, 2023 CVE Published
- Dec 10, 2024 CVE Updated
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
References
- https://www.suse.com/security/cve/CVE-2021-43797.html url
- https://access.redhat.com/security/cve/CVE-2021-43797 url
- https://security-tracker.debian.org/tracker/CVE-2021-43797 url
- https://github.com/netty/netty/commit/07aa6b5938a8b6ed7a6586e066400e2643897323 url
- https://github.com/netty/netty/security/advisories/GHSA-wx5j-54mm-rqqq url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.7/ url
- https://ubuntu.com/security/notices/USN-6049-1 advisory
- https://security.netapp.com/advisory/ntap-20220107-0003/ advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html advisory
- https://www.oracle.com/security-alerts/cpujul2022.html advisory