jd_edwards_enterpriseone_tools 漏洞

高危CVE-2021-228832021/03/03

CVE-2021-22883

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.

Node.js Fedora jd_edwards_enterpriseone_toolsRCE

CVSS7.5EPSS 91.3%

中危CVE-2015-17932015/07/09

CVE-2015-1793

The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.

OpenSSL jd_edwards_enterpriseone_toolsRCE

CVSS6.5EPSS 85.6%

jd_edwards_enterpriseone_tools

关联漏洞

CVE-2021-22883

CVE-2015-1793