Input validation error in protobuf - CVE-2022-3171

Vulnerability identifier: #VU69293

CSH Severity: Medium

CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-3171

CWE-ID: CWE-20

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input containing multiple instances of non-repeated embedded messages with repeated or unknown fields. A remote attacker can cause objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses.

protobuf
ObjectScale
Oracle Banking Platform
Cloudera Observability with IBM
DataStage on Cloud Pak for Data
Db2 Big SQL
IBM Business Automation Manager Open Editions
IBM OpenPages with Watson
dashDB Local
Oracle Communications Policy Management
Oracle FLEXCUBE Universal Banking
Dell EMC Streaming Data Platform
PowerVM NovaLink
IBM Planning Analytics Workspace
Answer Retrieval for Watson Discovery On Prem
PowerStore T
PowerStore X
Dell EMC PowerStore Family Operating System
User Entity Behavior Analytics
Storage Protect Server
Robotic Process Automation for Cloud Pak
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE CaaS Platform
SUSE Linux Enterprise Module for SUSE Manager Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
IBM i
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
Public Cloud Module
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Module for Public Cloud
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Installer
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Basesystem
Server Applications Module
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
openEuler
Fedora
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Observability with Instana
IBM Rational Team Concert
Engineering Workflow Management
IBM TXSeries for Multiplatforms
Log Analysis
Netcool Operations Insight
IBM Security Guardium Key Lifecycle Manager (GKLM)
Jira Service Management Data Center
Jira Service Management Server
Splunk User Behavior Analytics (UBA)
IBM Intelligent Operations Center
Oracle Communications Unified Inventory Management
WebSphere Remote Server
IBM Maximo Application Suite
IBM Transformation Extender Advanced
Jira Software Data Center
IBM Security Verify Governance
Oracle Banking Trade Finance
Oracle Banking Treasury Management
Oracle Communications Cloud Native Core Binding Support Function
Oracle Communications Cloud Native Core Network Exposure Function
Oracle Communications Cloud Native Core Network Repository Function
IBM Operations Analytics Predictive Insights
Integration Debezium
IBM Cloud Pak for Multicloud Management Monitoring
Red Hat build of Quarkus
IBM Cloud Transformation Advisor
QRadar User Behavior Analytics
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Watson Knowledge Catalog in Cloud Pak for Data
App Connect Enterprise Certified Container
IBM Tivoli Business Service Manager
IBM Tivoli Netcool Impact
IBM Cloud Application Performance Management (APM)
Maximo Manage Application in IBM Maximo Application Suite
IBM MQ
IBM Robotic Process Automation
IBM Security Guardium
IBM Data Risk Manager
Cloudera Data Platform Private Cloud Base for IBM
Oracle Financial Services Crime and Compliance Management Studio
GoldenGate Veridata
Oracle Fusion Middleware MapViewer
Oracle Banking Trade Finance Process Management
Oracle Banking Liquidity Management
Oracle Banking Supply Chain Finance
Oracle Banking Cash Management
Oracle Banking Credit Facilities Process Management
Oracle Healthcare Translational Research
IBM Edge Application Manager
IBM Disconnected Log Collector
Communications Unified Assurance
Voice Gateway
Red Hat Process Automation Manager (formerly JBoss BPM Suite)
Oracle Banking Corporate Lending
Juniper Secure Analytics (JSA)
Splunk Enterprise
IBM Qradar SIEM
Jira Software Server
Event Streams
MySQL Connectors
IBM DB2
Oracle Banking Payments
Oracle Retail Customer Management and Segmentation Foundation
SUSE Linux Enterprise Module for Packagehub Subpackages
python3-opencensus-context
python3-opencensus-ext-threading
python3-aiocontextvars
python3-grpcio-gcp
python2-grpcio-gcp
python3-Automat
python3-pytest-asyncio
python3-opencensus
python3-knack
perl-Alien-ProtoBuf
python3-Deprecated
python2-jsondiff
python3-jsondiff
python3-websocket-client
python3-opentelemetry-api
python3-googleapis-common-protos
python2-googleapis-common-protos
python3-avro
python3-google-api-core
python3-grpcio-debuginfo
grpc-devel
libgrpc++1-debuginfo
grpc-devel-debuginfo
libgrpc8-debuginfo
python3-grpcio
libgrpc8
libgrpc++1
python2-grpcio
grpc-debuginfo
python2-grpcio-debuginfo
grpc-debugsource
grpc-source
python3-PyGithub
azure-cli-core
python3-requests
python2-requests
python3-cryptography-vectors
python2-cryptography-vectors
python2-cryptography-debuginfo
python3-cryptography-debuginfo
python-cryptography-debugsource
python2-cryptography
python-cryptography-debuginfo
python3-cryptography
protobuf-devel-debuginfo
libprotobuf-lite20
libprotobuf20-32bit
libprotobuf-lite20-32bit
libprotobuf-lite20-debuginfo
libprotoc20-32bit
protobuf-debugsource
libprotobuf20
python3-protobuf
protobuf-devel
libprotobuf20-debuginfo
libprotoc20
protobuf-java
libprotoc20-debuginfo
python2-protobuf
protobuf-source
libprotoc20-32bit-debuginfo
libprotobuf20-32bit-debuginfo
libprotobuf-lite20-32bit-debuginfo
python3-pytest
protobuf-lite
protobuf-javalite
protobuf-javadoc
protobuf-java-util
protobuf-lite-devel
protobuf-compiler
protobuf-debuginfo
protobuf-bom
protobuf-parent
protobuf
dev-java/protobuf-java
python3-zope.interface-debuginfo
python-zope.interface-debuginfo
python3-zope.interface
python-zope.interface-debugsource
python3-psutil-debuginfo
python3-psutil
python2-psutil
python-psutil-debugsource
python-psutil-debuginfo
python2-psutil-debuginfo
python3-websockets-debuginfo
python3-websockets
python-websockets-debugsource
python3-humanfriendly
python2-humanfriendly
python3-constantly
python3-hyperlink
python3-incremental
python3-Twisted
python3-Twisted-debuginfo
Primavera Gateway
IBM WebSphere Application Server Liberty
AMQ Streams
Oracle Communications Cloud Native Core Unified Data Repository
Oracle Communications Cloud Native Core Console
Oracle Communications Cloud Native Core Security Edge Protection Proxy
Oracle Communications Cloud Native Core Network Slice Selection Function
watsonx.data
IBM Cloud Pak System
IBM Sterling Global Mailbox (GM)
Dell EMC VxRail Appliance
IBM CICS TX Advanced
IBM App Connect Enterprise
IBM CICS TX Standard
IBM Cognos Analytics

Install updates from vendor's website.

protobuf - addressed in versions 3.16.3, 3.19.6, 3.20.3, 3.21.7
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.2.2
ObjectScale - update to 1.3.0
Log Analysis - addressed in versions 1.3.7 FP2, 1.3.7.2 IF001A
Netcool Operations Insight - update to 1.6.15
IBM Data Risk Manager - update to 2.0.6.15
DataStage on Cloud Pak for Data - update to 4.8.5
Jira Service Management Data Center - addressed in versions 4.20.27, 5.4.11
Jira Service Management Server - addressed in versions 4.20.27, 5.4.11
Splunk User Behavior Analytics (UBA) - addressed in versions 5.2.1, 5.3.0
Communications Unified Assurance - addressed in versions 5.5.10, 6.0.2
Red Hat Process Automation Manager (formerly JBoss BPM Suite) - update to 7.13.4
Cloudera Data Platform Private Cloud Base for IBM - update to 7.1.7 SP3
Juniper Secure Analytics (JSA) - update to 7.5.0 UP7 IF04
IBM Qradar SIEM - update to 7.5.0 Update Pack 7 IF04
Db2 Big SQL - update to 8.0
IBM Business Automation Manager Open Editions - update to 8.0.3
MySQL Connectors - update to 8.0.32
Splunk Enterprise - addressed in versions 8.2.12, 9.0.6, 9.1.1
IBM Maximo Application Suite - addressed in versions 8.8.4, 8.9.1
Jira Software Data Center - addressed in versions 9.4.16, 9.6.0
Jira Software Server - addressed in versions 9.4.16, 9.6.0
dashDB Local - update to 11.5.9.0
Oracle Banking Corporate Lending - update to 14.4
Oracle FLEXCUBE Universal Banking - update to 14.3.0
python3-opencensus-context - update to 0.1.2-150100.3.3.3
python3-opencensus-ext-threading - update to 0.1.2-150100.3.3.3
python3-aiocontextvars - update to 0.2.2-150100.3.3.3
python3-grpcio-gcp - update to 0.2.2-150100.3.3.3
python2-grpcio-gcp - update to 0.2.2-150100.3.3.3
python3-Automat - update to 0.6.0-150000.3.4.1
python3-pytest-asyncio - update to 0.8.0-150100.3.3.3
python3-opencensus - update to 0.8.0-150100.3.3.3
python3-knack - update to 0.9.0-150100.3.7.3
perl-Alien-ProtoBuf - update to 0.09-17.fc36
Voice Gateway - addressed in versions 1.0.8.2, 1.0.8.6
python3-Deprecated - update to 1.2.13-150100.3.3.3
python2-jsondiff - update to 1.3.0-150100.3.6.3
python3-jsondiff - update to 1.3.0-150100.3.6.3
python3-websocket-client - update to 1.3.2-150100.6.7.3
IBM Operations Analytics Predictive Insights - update to 1.3.6.6
python3-opentelemetry-api - update to 1.5.0-150100.3.3.3
python3-googleapis-common-protos - update to 1.6.0-150100.3.3.3
python2-googleapis-common-protos - update to 1.6.0-150100.3.3.3
Dell EMC Streaming Data Platform - update to 1.7.0
IBM Disconnected Log Collector - update to 1.8.3
Integration Debezium - update to 1.9.7
python3-avro - update to 1.11.0-150100.3.3.3
python3-google-api-core - update to 1.14.2-150100.3.3.3
python3-grpcio-debuginfo - update to 1.25.0-150100.3.3.3
grpc-devel - update to 1.25.0-150100.3.3.3
libgrpc++1-debuginfo - update to 1.25.0-150100.3.3.3
grpc-devel-debuginfo - update to 1.25.0-150100.3.3.3
libgrpc8-debuginfo - update to 1.25.0-150100.3.3.3
python3-grpcio - update to 1.25.0-150100.3.3.3
libgrpc8 - update to 1.25.0-150100.3.3.3
libgrpc++1 - update to 1.25.0-150100.3.3.3
python2-grpcio - update to 1.25.0-150100.3.3.3
grpc-debuginfo - update to 1.25.0-150100.3.3.3
python2-grpcio-debuginfo - update to 1.25.0-150100.3.3.3
grpc-debugsource - update to 1.25.0-150100.3.3.3
grpc-source - update to 1.25.0-150100.3.3.3
python3-PyGithub - update to 1.43.5-150100.3.3.3
PowerVM NovaLink - addressed in versions 2.0.1-230201, 2.0.3.1.1-230127, 2.1.0-230209
watsonx.data - update to 2.0.3
IBM Planning Analytics Workspace - update to 2.0.83
IBM Cloud Pak for Multicloud Management Monitoring - update to 2.3 Fix Pack 6
IBM Cloud Pak System - addressed in versions 2.3.4.1, 2.3.5.0
AMQ Streams - update to 2.7.0
Red Hat build of Quarkus - update to 2.7.7
Answer Retrieval for Watson Discovery On Prem - update to 2.9.0
azure-cli-core - update to 2.17.1-150100.6.18.1
python3-requests - update to 2.25.1-150100.6.13.3
python2-requests - update to 2.25.1-150100.6.13.3
PowerStore T - update to 3.2.1.0-1989710
PowerStore X - update to 3.2.1.0-1989710
python3-cryptography-vectors - update to 3.3.2-150100.3.11.3
python2-cryptography-vectors - update to 3.3.2-150100.3.11.3
python2-cryptography-debuginfo - update to 3.3.2-150100.7.15.3
python3-cryptography-debuginfo - update to 3.3.2-150100.7.15.3
python-cryptography-debugsource - update to 3.3.2-150100.7.15.3
python2-cryptography - update to 3.3.2-150100.7.15.3
python-cryptography-debuginfo - update to 3.3.2-150100.7.15.3
python3-cryptography - update to 3.3.2-150100.7.15.3
IBM Cloud Transformation Advisor - update to 3.4.0
protobuf-devel-debuginfo - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
libprotobuf-lite20 - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
libprotobuf20-32bit - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
libprotobuf-lite20-32bit - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
libprotobuf-lite20-debuginfo - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
libprotoc20-32bit - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
protobuf-debugsource - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
libprotobuf20 - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
python3-protobuf - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
protobuf-devel - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
libprotobuf20-debuginfo - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
libprotoc20 - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
protobuf-java - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
libprotoc20-debuginfo - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
python2-protobuf - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
protobuf-source - addressed in versions 3.9.2-150100.8.3.3, 3.9.2-150200.4.19.2
libprotoc20-32bit-debuginfo - update to 3.9.2-150200.4.19.2
libprotobuf20-32bit-debuginfo - update to 3.9.2-150200.4.19.2
libprotobuf-lite20-32bit-debuginfo - update to 3.9.2-150200.4.19.2
python3-pytest - update to 3.10.1-150000.7.5.1
protobuf-lite - addressed in versions 3.14.0-5, 3.14.0-6
protobuf-java - addressed in versions 3.14.0-5, 3.14.0-6
protobuf-javalite - addressed in versions 3.14.0-5, 3.14.0-6
protobuf-javadoc - addressed in versions 3.14.0-5, 3.14.0-6
protobuf-java-util - addressed in versions 3.14.0-5, 3.14.0-6
protobuf-lite-devel - addressed in versions 3.14.0-5, 3.14.0-6
protobuf-debugsource - addressed in versions 3.14.0-5, 3.14.0-6
protobuf-compiler - addressed in versions 3.14.0-5, 3.14.0-6
protobuf-devel - addressed in versions 3.14.0-5, 3.14.0-6
protobuf-debuginfo - addressed in versions 3.14.0-5, 3.14.0-6
protobuf-bom - addressed in versions 3.14.0-5, 3.14.0-6
python3-protobuf - addressed in versions 3.14.0-5, 3.14.0-6
protobuf-parent - addressed in versions 3.14.0-5, 3.14.0-6
protobuf - addressed in versions 3.14.0-5, 3.14.0-6
protobuf - update to 3.19.6-1
protobuf - addressed in versions 3.19.6-1.fc36, 3.19.6-1.fc37
dev-java/protobuf-java - update to 3.20.3
Dell EMC PowerStore Family Operating System - update to 4.0.0.0-2284811
QRadar User Behavior Analytics - update to 4.1.12
python3-zope.interface-debuginfo - update to 4.4.2-150000.3.4.1
python-zope.interface-debuginfo - update to 4.4.2-150000.3.4.1
python3-zope.interface - update to 4.4.2-150000.3.4.1
python-zope.interface-debugsource - update to 4.4.2-150000.3.4.1
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.6.2
IBM Watson Knowledge Catalog in Cloud Pak for Data - update to 4.6.3
User Entity Behavior Analytics - update to 5.0.2
App Connect Enterprise Certified Container - addressed in versions 5.0.6, 8.1.0
python3-psutil-debuginfo - update to 5.9.1-150100.6.6.3
python3-psutil - update to 5.9.1-150100.6.6.3
python2-psutil - update to 5.9.1-150100.6.6.3
python-psutil-debugsource - update to 5.9.1-150100.6.6.3
python-psutil-debuginfo - update to 5.9.1-150100.6.6.3
python2-psutil-debuginfo - update to 5.9.1-150100.6.6.3
IBM Sterling Global Mailbox (GM) - addressed in versions 6.0.3.8, 6.1.2.2
IBM Tivoli Business Service Manager - update to 6.2.0.5.4
Dell EMC VxRail Appliance - update to 7.0.411
IBM Tivoli Netcool Impact - update to 7.1.0.29
IBM Cloud Application Performance Management (APM) - update to 8.1.4.0.14
Storage Protect Server - update to 8.1.22
Maximo Manage Application in IBM Maximo Application Suite - addressed in versions 8.5.6, 8.6.2
python3-websockets-debuginfo - update to 9.1-150100.3.3.3
python3-websockets - update to 9.1-150100.3.3.3
python-websockets-debugsource - update to 9.1-150100.3.3.3
IBM MQ - addressed in versions 9.2.0.7, 9.3.0.2, 9.3.1
python3-humanfriendly - update to 10.0-150100.6.3.3
python2-humanfriendly - update to 10.0-150100.6.3.3
IBM CICS TX Advanced - addressed in versions 10.1.0.0 ifix13, 11.1.0.0 ifix6
IBM App Connect Enterprise - addressed in versions 11.0.0.20, 12.0.8.0
IBM CICS TX Standard - update to 11.1.0.0 ifix6
IBM Cognos Analytics - addressed in versions 11.1.7 Fix Pack 7, 11.2.4.1 IF1
Event Streams - update to 11.4.0
python3-constantly - update to 15.1.0-150000.3.4.1
python3-hyperlink - update to 17.2.1-150000.3.4.1
python3-incremental - update to 17.5.0-150000.3.4.1
python3-Twisted - update to 17.9.0-150000.3.8.1
python3-Twisted-debuginfo - update to 17.9.0-150000.3.8.1
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.1, 23.0.1
IBM Robotic Process Automation - addressed in versions 21.0.7.1, 23.0.1

• https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-h4h5-3hr4-j3g2
• https://www.ibm.com/support/pages/node/6960535

• Denial of service in protobuf
• Multiple vulnerabilities in Red Hat Integration Debezium
• Multiple vulnerabilities in IBM WebSphere Application Server Liberty
• Multiple vulnerabilities in IBM Answer Retrieval for Watson Discovery
• Multiple vulnerabilities in IBM Data Risk Manager
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple vulnerabilities in Primavera Gateway
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Slice Selection Function
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Security Edge Protection Proxy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Repository Function
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Exposure Function
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Console
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Binding Support Function
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Unified Data Repository
• Multiple vulnerabilities in Oracle Communications Unified Inventory Management
• Multiple vulnerabilities in MySQL Connectors
• Gentoo update for protobuf-java
• SUSE update for protobuf
• Multiple vulnerabilities in Oracle Fusion Middleware MapViewer
• Multiple vulnerabilities in Oracle Financial Services Crime and Compliance Management Studio
• Input validation error in IBM MQ Blockchain bridge
• Multiple vulnerabilities in IBM Engineering Workflow Management and Rational Team Concert
• Multiple vulnerabilities in IBM Robotic Process Automation
• Multiple vulnerabilities in IBM Planning Analytics Workspace
• Multiple vulnerabilities in IBM Voice Gateway
• Multiple vulnerabilities in IBM Watson Discovery Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM i
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management Monitoring
• Multiple vulnerabilities in IBM PowerVM Novalink
• Multiple vulnerabilities in IBM Operations Analytics Predictive Insights
• Multiple vulnerabilities in IBM TXSeries for Multiplatforms
• Multiple vulnerabilities in IBM CICS TX Standard
• Multiple vulnerabilities in IBM CICS TX Advanced
• Multiple vulnerabilities in Red Hat build of Quarkus
• Multiple vulnerabilities in IBM Watson Knowledge Catalog
• Multiple vulnerabilities in IBM Security Guardium
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in IBM Sterling Global Mailbox
• Multiple vulnerabilities in IBM Tivoli Netcool Impact
• Multiple vulnerabilities in IBM Operations Analytics - Log Analysis
• Multiple vulnerabilities in Oracle FLEXCUBE Universal Banking
• Multiple vulnerabilities in Oracle Banking Treasury Management
• Multiple vulnerabilities in Oracle Banking Trade Finance
• Multiple vulnerabilities in Oracle Banking Payments
• Multiple vulnerabilities in Oracle Banking Corporate Lending
• Multiple vulnerabilities in Oracle Communications Policy Management
• Multiple vulnerabilities in Communications Unified Assurance
• Multiple vulnerabilities in Oracle Healthcare Translational Research
• Multiple vulnerabilities in Oracle Retail Customer Management and Segmentation Foundation
• IBM App Connect Enterprise Certified Container update for protobuf
• Multiple vulnerabilities in IBM Maximo Application Suite - Monitor Component
• Multiple vulnerabilities in IBM Cognos Analytics
• Multiple vulnerabilities in IBM App Connect Enterprise
• Multiple vulnerabilities in IBM Edge Application Manager
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in IBM QRadar User Behavior Analytics
• SUSE update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, pyt
• Multiple vulnerabilities in IBM Maximo Application Suite - Manage Component
• Multiple vulnerabilities in Dell Streaming Data Platform
• Multiple vulnerabilities in Dell PowerStore Family
• Splunk Enterprise update for third-party packages
• Multiple vulnerabilities in Red Hat Process Automation Manager
• Multiple vulnerabilities in IBM Application Performance Management
• SUSE update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, pyt
• Multiple vulnerabilities in Oracle Banking Platform
• Multiple vulnerabilities in GoldenGate Veridata
• Jira Service Management Data Center and Server update for protobuf-java
• Multiple vulnerabilities in IBM DB2
• Multiple vulnerabilities in IBM Observability with Instana (OnPrem)
• Splunk User Behavior Analytics (UBA) update for third-party software
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Disconnected Log Collector
• Multiple vulnerablities in Juniper Networks Juniper Secure Analytics
• openEuler 20.03 LTS SP1 update for protobuf
• openEuler 20.03 LTS SP3 update for protobuf
• openEuler 22.03 LTS update for protobuf
• Multiple vulnerabilities in IBM Transformation Extender Advanced
• Jira Software Data Center and Server update for protobuf-java
• Multiple vulnerabilities in IBM Storage Protect Server
• Multiple vulnerabilities in IBM OpenPages with Watson
• Multiple vulnerabilities in IBM Tivoli Business Service Manager
• Multiple vulnerabilities in IBM Security Guardium Key Lifecycle Manager
• Multiple vulnerabilities in IBM WebSphere Remote Server
• Multiple vulnerabilities in IBM Intelligent Operations Center (IOC)
• Multiple vulnerabilities in AMQ Streams 2.7
• Multiple vulnerabilities in Dell PowerStore Family
• Amazon Linux AMI update for protobuf
• Multiple vulnerabilities in IBM Security Verify Governance
• Input validation error in Event Streams
• IBM watsonx.data update for Google Protocol Buffers
• IBM watsonx.data update for FasterXML jackson-databind
• Multiple vulnerabilities in IBM Cloud Pak System
• Fedora 37 update for protobuf
• Fedora 36 update for perl-Alien-ProtoBuf, protobuf
• Multiple vulnerabilities in IBM dashDB Local
• Multiple vulnerabilities in IBM DataStage on Cloud Pak for Data
• Multiple vulnerabilities in Dell ObjectScale
• Multiple vulnerabilities in IBM Cloudera Observability on Premises with IBM
• Multiple vulnerabilities in IBM User Entity Behavior Analytics
• IBM Watson Speech Services Cartridge update for protobuf-java core and lite
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in Oracle Banking Supply Chain Finance
• Multiple vulnerabilities in Oracle Banking Trade Finance Process Management
• Multiple vulnerabilities in Oracle Banking Credit Facilities Process Management
• Multiple vulnerabilities in Oracle Banking Liquidity Management
• Multiple vulnerabilities in Oracle Banking Cash Management
• Multiple vulnerabilities in IBM Big SQL on IBM Cloud Pak for Data
• Multiple vulnerabilities in Cloudera Data Platform Private Cloud Base with IBM (CDP)